1. 09 Jan, 2011 2 commits
    • Georg Brandl's avatar
      Remove duplicate entry. · cec4b4fa
      Georg Brandl authored
      cec4b4fa
    • R. David Murray's avatar
      Merged revisions 87873 via svnmerge from · d97f5ce3
      R. David Murray authored
      svn+ssh://pythondev@svn.python.org/python/branches/py3k
      
      ........
        r87873 | r.david.murray | 2011-01-08 21:35:24 -0500 (Sat, 08 Jan 2011) | 12 lines
      
        #5871: protect against header injection attacks.
      
        This makes Header.encode throw a HeaderParseError if it winds up
        formatting a header such that a continuation line has no leading
        whitespace and looks like a header.  Since Header accepts values
        containing newlines and preserves them (and this is by design), without
        this fix any program that took user input (say, a subject in a web form)
        and passed it to the email package as a header was vulnerable to header
        injection attacks.  (As far as we know this has never been exploited.)
      
        Thanks to Jakub Wilk for reporting this vulnerability.
      ........
      d97f5ce3
  2. 08 Jan, 2011 2 commits
  3. 07 Jan, 2011 2 commits
    • R. David Murray's avatar
      Blocked revisions 87840 via svnmerge · f653ddbe
      R. David Murray authored
      ........
        r87840 | r.david.murray | 2011-01-07 18:25:30 -0500 (Fri, 07 Jan 2011) | 6 lines
      
        #10686: recode non-ASCII headers to 'unknown-8bit' instead of ?s.
      
        This applies only when generating strings from non-RFC compliant binary
        input; it makes the existing recoding behavior more consistent (ie:
        now no data is lost when recoding).
      ........
      f653ddbe
    • Antoine Pitrou's avatar
      Merged revisions 87834 via svnmerge from · 5a72e76b
      Antoine Pitrou authored
      svn+ssh://pythondev@svn.python.org/python/branches/py3k
      
      ........
        r87834 | antoine.pitrou | 2011-01-07 22:43:59 +0100 (ven., 07 janv. 2011) | 5 lines
      
        Issue #8020: Avoid a crash where the small objects allocator would read
        non-Python managed memory while it is being modified by another thread.
        Patch by Matt Bandy.
      ........
      5a72e76b
  4. 06 Jan, 2011 4 commits
  5. 05 Jan, 2011 2 commits
  6. 04 Jan, 2011 4 commits
  7. 03 Jan, 2011 10 commits
  8. 02 Jan, 2011 9 commits
  9. 01 Jan, 2011 3 commits
  10. 31 Dec, 2010 1 commit
  11. 29 Dec, 2010 1 commit
    • R. David Murray's avatar
      Blocked revisions 87567 via svnmerge · 5dd32a2d
      R. David Murray authored
      ........
        r87567 | r.david.murray | 2010-12-29 11:57:24 -0500 (Wed, 29 Dec 2010) | 2 lines
      
        Fix a comment typo and update another comment to match Python3 reality
      ........
      5dd32a2d