From: guido@google.com <guido@google.com>
Date: Tue, 29 Mar 2011 19:02:49 +0000 (-0700)
Subject: Merge Issue 11662 from 3.2 branch.
X-Git-Tag: v3.3.0a1~2727^2~3
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=2008a8f8c09b18fbd24e8039553d50a828dd3fb2;p=python

Merge Issue 11662 from 3.2 branch.
---

2008a8f8c09b18fbd24e8039553d50a828dd3fb2
diff --cc Misc/NEWS
index f70998c9db,04c9faee93..d85972de88
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@@ -84,26 -49,10 +84,29 @@@ Core and Builtin
  Library
  -------
  
+ - Issue #11662: Make urllib and urllib2 ignore redirections if the
+   scheme is not HTTP, HTTPS or FTP (CVE-2011-1521).
+ 
 -- Issue #11628: cmp_to_key generated class should use __slots__
 +- Issue #6811: Allow importlib to change a code object's co_filename attribute
 +  to match the path to where the source code currently is, not where the code
 +  object originally came from.
 +
 +- Issue #8754: Have importlib use the repr of a module name in error messages.
 +
 +- Issue #11591: Prevent "import site" from modifying sys.path when python
 +  was started with -S.
 +
 +- collections.namedtuple() now adds a _source attribute to the generated
 +  class.  This make the source more accessible than the outdated
 +  "verbose" option which prints to stdout but doesn't make the source
 +  string available.
 +
 +- Issue #11371: Mark getopt error messages as localizable.  Patch by Filip
 +  Gruszczyński.
 +
 +- Issue #11333: Add __slots__ to collections ABCs.
 +
 +- Issue #11628: cmp_to_key generated class should use __slots__.
  
  - Issue #5537: Fix time2isoz() and time2netscape() functions of
    httplib.cookiejar for expiration year greater than 2038 on 32-bit systems.