[Python-checkins] [python/cpython] 6f6bc1: bpo-26657: Fix Windows directory traversal vulnera...

GitHub noreply at github.com
Wed Jul 12 08:52:06 EDT 2017


  Branch: refs/heads/3.4
  Home:   https://github.com/python/cpython
  Commit: 6f6bc1da8aaae52664e7747e328d26eb59c0e74f
      https://github.com/python/cpython/commit/6f6bc1da8aaae52664e7747e328d26eb59c0e74f
  Author: Victor Stinner <victor.stinner at gmail.com>
  Date:   2017-07-12 (Wed, 12 Jul 2017)

  Changed paths:
    M Lib/http/server.py
    M Lib/test/test_httpservers.py
    A Misc/NEWS.d/next/Security/2017-07-11-22-07-03.bpo-26657.wvpzFD.rst

  Log Message:
  -----------
  bpo-26657: Fix Windows directory traversal vulnerability with http.server (#782)

Based on patch by Philipp Hagemeister.  This fixes a regression caused by
revision f4377699fd47.

(cherry picked from commit d274b3f1f1e2d8811733fb952c9f18d7da3a376a)




More information about the Python-checkins mailing list