Merge issue 11662.

7252dc3b · Guido van Rossum · fe40f69f · 6ead9342 · 7252dc3b
Commit 7252dc3b authored Mar 29, 2011 by Guido van Rossum
Show whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

Misc/NEWS Misc/NEWS +3 -0

No files found.
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -139,6 +139,9 @@ Library
 - Issue #11666: let help() display named tuple attributes and methods
  that start with a leading underscore.

+- Issue #11662: Make urllib and urllib2 ignore redirections if the
+  scheme is not HTTP, HTTPS or FTP (CVE-2011-1521).
+
 - Issue #5537: Fix time2isoz() and time2netscape() functions of
  httplib.cookiejar for expiration year greater than 2038 on 32-bit systems.