summaryrefslogtreecommitdiffstats
path: root/Misc
diff options
context:
space:
mode:
authorBenjamin Peterson <benjamin@python.org>2016-08-14 00:17:06 (GMT)
committerBenjamin Peterson <benjamin@python.org>2016-08-14 00:17:06 (GMT)
commit6e01d90cc8bfac920bd4f7143b3968a8a21079d9 (patch)
tree794a1e91babec2a3113205b15832ebaa19a73725 /Misc
parent6f25003291610fd7696aa09b725742a499d6b2cf (diff)
downloadcpython-6e01d90cc8bfac920bd4f7143b3968a8a21079d9.zip
cpython-6e01d90cc8bfac920bd4f7143b3968a8a21079d9.tar.gz
cpython-6e01d90cc8bfac920bd4f7143b3968a8a21079d9.tar.bz2
check for overflow in join_append_data (closes #27758)
Reported by Thomas E. Hybel
Diffstat (limited to 'Misc')
-rw-r--r--Misc/NEWS3
1 files changed, 3 insertions, 0 deletions
diff --git a/Misc/NEWS b/Misc/NEWS
index e9a8f28..c3235de 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -29,6 +29,9 @@ Core and Builtins
Library
-------
+- Issue #27758: Fix possible integer overflow in the _csv module for large record
+ lengths.
+
- Issue #27568: Prevent HTTPoxy attack (CVE-2016-1000110). Ignore the
HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates
that the script is in CGI mode.