From: Benjamin Peterson Date: Sat, 5 Dec 2015 08:17:57 +0000 (-0800) Subject: add CVE and issue number X-Git-Tag: v2.7.11~1 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=167910a42b4efef5d9139ea7bab11f44d2fc0696;p=thirdparty%2FPython%2Fcpython.git add CVE and issue number --- diff --git a/Misc/NEWS b/Misc/NEWS index 716d36a75e44..9ee1b897d0c8 100644 --- a/Misc/NEWS +++ b/Misc/NEWS @@ -1354,8 +1354,9 @@ Library - Issue #21349: Passing a memoryview to _winreg.SetValueEx now correctly raises a TypeError where it previously crashed the interpreter. Patch by Brian Kearns -- Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second - parameter. Bug reported by Guido Vranken. +- Issue #21529 (CVE-2014-4616): Fix arbitrary memory access in + JSONDecoder.raw_decode with a negative second parameter. Bug reported by Guido + Vranken. - Issue #21172: isinstance check relaxed from dict to collections.Mapping.