diff options
| -rw-r--r-- | CHANGES.txt | 8 | ||||
| -rwxr-xr-x | setup.cfg | 2 |
2 files changed, 5 insertions, 5 deletions
diff --git a/CHANGES.txt b/CHANGES.txt index 0beaded0..602d8269 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -14,10 +14,10 @@ CHANGES handled properly at runtime. In 2.x it was possible to get away without including the declaration, but only at the cost of forcing namespace packages to be imported early, which 3.0 no longer does. -* Issue #7: Setuptools itself is now distributed as a zipfile instead of a - tarball. This approach avoids the potential security vulnerabilities - presented by use of tar files. It also leverages the security features added - to ZipFile.extract in Python 2.7.4. +* Issue #7: Setuptools itself is now distributed as a zip archive in addition to + tar archive. ez_setup.py now uses zip archive. This approach avoids the potential + security vulnerabilities presented by use of tar archives in ez_setup.py. + It also leverages the security features added to ZipFile.extract in Python 2.7.4. * Issue #65: Removed deprecated Features functionality. --- @@ -15,7 +15,7 @@ all_files = 1 upload-dir = docs/build/html [sdist] -formats=zip +formats = gztar zip [wheel] universal=1 |