summaryrefslogtreecommitdiff
path: root/Misc/NEWS.d/2.7.9.rst
blob: 15cbfe98cb07007c5a28760f7ff111ff15871b38 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
.. bpo: 22959
.. date: 9494
.. nonce: FioVGu
.. release date: 2014-12-10
.. section: Library

Remove the *check_hostname* parameter of httplib.HTTPSConnection. The
*context* parameter should be used instead.

..

.. bpo: 16043
.. date: 9493
.. nonce: TGIC7t
.. section: Library

Add a default limit for the amount of data xmlrpclib.gzip_decode will
return. This resolves CVE-2013-1753.

..

.. bpo: 16042
.. date: 9492
.. nonce: 7I3FPy
.. section: Library

CVE-2013-1752: smtplib: Limit amount of data read by limiting the call to
readline().  Original patch by Christian Heimes.

..

.. bpo: 16041
.. date: 9491
.. nonce: TyhfVi
.. section: Library

In poplib, limit maximum line length read from the server to prevent
CVE-2013-1752.

..

.. bpo: 22960
.. date: 9490
.. nonce: J-KiZ3
.. section: Library

Add a context argument to xmlrpclib.ServerProxy.

..

.. bpo: 22935
.. date: 9489
.. nonce: -vY3lc
.. section: Build

Allow the ssl module to be compiled if openssl doesn't support SSL 3.

..

.. bpo: 17128
.. date: 9488
.. nonce: JMdOBP
.. section: Build

Use private version of OpenSSL for 2.7.9 OS X 10.5+ installer.