Staging
v0.5.1
https://github.com/python/cpython
Revision 2dd885eaa0d427e84892673c83d697bca5427c8b authored by Miss Islington (bot) on 25 March 2018, 11:28:20 UTC, committed by Christian Heimes on 25 March 2018, 11:28:20 UTC
Harden ssl module against LibreSSL CVE-2018-8970.
X509_VERIFY_PARAM_set1_host() is called with an explicit namelen. A new test
ensures that NULL bytes are not allowed.

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit d02ac25ab0879f1a6de6937573bf00a16b7bd22e)

Co-authored-by: Christian Heimes <christian@python.org>
1 parent c6d94c3
History
Tip revision: 2dd885eaa0d427e84892673c83d697bca5427c8b authored by Miss Islington (bot) on 25 March 2018, 11:28:20 UTC
[3.7] bpo-33136: Harden ssl module against CVE-2018-8970 (GH-6229) (GH-6230)
Tip revision: 2dd885e

README

back to top