Merge issue 11662.

diff --cc Misc/NEWS
index 3f1bb3450bb8fdbe11ab41475686b54d9d825a75,04c9faee932db0e485c1befc60ab7974f12d72fd..104704658fad97db4710d9e85b6fed4e95a4b1dc
--- 1/Misc/NEWS
--- 2/Misc/NEWS
+++ b/Misc/NEWS
@@@ -71,9 -54,6 +71,12 @@@ Librar
  
  - Issue #11628: cmp_to_key generated class should use __slots__
  
 +- Issue #11666: let help() display named tuple attributes and methods
 +  that start with a leading underscore.
 +
++- Issue #11662: Make urllib and urllib2 ignore redirections if the
++  scheme is not HTTP, HTTPS or FTP (CVE-2011-1521).
++
  - Issue #5537: Fix time2isoz() and time2netscape() functions of
    httplib.cookiejar for expiration year greater than 2038 on 32-bit systems.