Update of /cvsroot/python/python/dist/src/Misc In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv15199/Misc Modified Files: Tag: release24-maint NEWS Log Message: Security fix PSF-2005-001 for SimpleXMLRPCServer.py. Index: NEWS =================================================================== RCS file: /cvsroot/python/python/dist/src/Misc/NEWS,v retrieving revision 1.1193.2.17 retrieving revision 1.1193.2.18 diff -u -d -r1.1193.2.17 -r1.1193.2.18 --- NEWS 29 Jan 2005 13:33:27 -0000 1.1193.2.17 +++ NEWS 3 Feb 2005 15:00:18 -0000 1.1193.2.18 @@ -25,6 +25,10 @@ Library ------- +- Applied a security fix to SimpleXMLRPCserver (PSF-2005-001). This + disables recursive traversal through instance attributes, which can + be exploited in various ways. + - Bug #1110478: Revert os.environ.update to do putenv again. - Bug #1103844: fix distutils.install.dump_dirs() with negated options.