Commit 2deaea31 authored by Benjamin Peterson's avatar Benjamin Peterson

merge 3.2

parents 102764a1 5e621176
...@@ -47,6 +47,10 @@ Library ...@@ -47,6 +47,10 @@ Library
- Issue #23365: Fixed possible integer overflow in - Issue #23365: Fixed possible integer overflow in
itertools.combinations_with_replacement. itertools.combinations_with_replacement.
- Issue #21529 (CVE-2014-4616): Fix arbitrary memory access in
JSONDecoder.raw_decode with a negative second parameter. Bug reported by Guido
Vranken.
C API C API
----- -----
...@@ -97,9 +101,6 @@ Library ...@@ -97,9 +101,6 @@ Library
- Issue #21766: Prevent a security hole in CGIHTTPServer by URL unquoting paths - Issue #21766: Prevent a security hole in CGIHTTPServer by URL unquoting paths
before checking for a CGI script at that path. before checking for a CGI script at that path.
- Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second
parameter. Bug reported by Guido Vranken.
- Issue #20633: Replace relative import by absolute import. - Issue #20633: Replace relative import by absolute import.
- Issue #21082: In os.makedirs, do not set the process-wide umask. Note this - Issue #21082: In os.makedirs, do not set the process-wide umask. Note this
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment