summaryrefslogtreecommitdiffstats
path: root/Misc
diff options
context:
space:
mode:
authorBenjamin Peterson <benjamin@python.org>2014-12-06 01:34:56 (GMT)
committerBenjamin Peterson <benjamin@python.org>2014-12-06 01:34:56 (GMT)
commiteca72d47f5a639a0ac66a98a2d63b30df2ce310f (patch)
tree5c67eee0bab41a933c82c1d0d2540e4215cad215 /Misc
parentf990e7f1f0de45a07bab0e520d01f706b6f46569 (diff)
parent81b7374fbe5f77567642d5aa42d4c1e6eee610b2 (diff)
downloadcpython-eca72d47f5a639a0ac66a98a2d63b30df2ce310f.zip
cpython-eca72d47f5a639a0ac66a98a2d63b30df2ce310f.tar.gz
cpython-eca72d47f5a639a0ac66a98a2d63b30df2ce310f.tar.bz2
merge 3.3 (#16043)
Diffstat (limited to 'Misc')
-rw-r--r--Misc/NEWS3
1 files changed, 3 insertions, 0 deletions
diff --git a/Misc/NEWS b/Misc/NEWS
index b8ec148..7d6a99b 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -39,6 +39,9 @@ Core and Builtins
Library
-------
+- Issue #16043: Add a default limit for the amount of data xmlrpclib.gzip_decode
+ will return. This resolves CVE-2013-1753.
+
- Issue #14099: ZipFile.open() no longer reopen the underlying file. Objects
returned by ZipFile.open() can now operate independently of the ZipFile even
if the ZipFile was created by passing in a file-like object as the first