On Wed, Mar 14, 2012 at 6:35 PM, Benjamin Peterson <benjamin@python.org> wrote:
2012/3/14 Gregory P. Smith <greg@krypto.org>:
> The fixes for the expat hash randomization DoS are in and working -
> http://bugs.python.org/issue14234.  New stable and security fix rc2 release
> candidates should be created for 2.6, 2.7, 3.1 and 3.2.

Okay. Can you tell me the commits I need to transplant to the 2.7
release branch?


For 2.7:
  http://hg.python.org/cpython/rev/b54f5849013c
  http://hg.python.org/cpython/rev/cb72aa8a8008

For 2.6:
  http://hg.python.org/cpython/rev/9c8d066013ea

For 3.2:
  http://hg.python.org/cpython/rev/d6c197edd99b
  http://hg.python.org/cpython/rev/b2d4a6a9463e

For 3.1:
  http://hg.python.org/cpython/rev/7b5bc1719477


2.6 and 3.1 only need to transplant one commit as they don't support --with-system-expat.