Staging
v0.5.1
https://github.com/python/cpython
Revision 2dd885eaa0d427e84892673c83d697bca5427c8b authored by Miss Islington (bot) on 25 March 2018, 11:28:20 UTC, committed by Christian Heimes on 25 March 2018, 11:28:20 UTC
Harden ssl module against LibreSSL CVE-2018-8970.
X509_VERIFY_PARAM_set1_host() is called with an explicit namelen. A new test
ensures that NULL bytes are not allowed.

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit d02ac25ab0879f1a6de6937573bf00a16b7bd22e)

Co-authored-by: Christian Heimes <christian@python.org>
1 parent c6d94c3
History
Tip revision: 2dd885eaa0d427e84892673c83d697bca5427c8b authored by Miss Islington (bot) on 25 March 2018, 11:28:20 UTC
[3.7] bpo-33136: Harden ssl module against CVE-2018-8970 (GH-6229) (GH-6230)
Tip revision: 2dd885e
File Mode Size
.github
Doc
Grammar
Include
Lib
Mac
Misc
Modules
Objects
PC
PCbuild
Parser
Programs
Python
Tools
m4
.gitattributes -rw-r--r-- 772 bytes
.gitignore -rw-r--r-- 1.5 KB
.travis.yml -rw-r--r-- 5.7 KB
LICENSE -rw-r--r-- 12.5 KB
Makefile.pre.in -rw-r--r-- 60.8 KB
README.rst -rw-r--r-- 9.1 KB
aclocal.m4 -rw-r--r-- 10.7 KB
config.guess -rwxr-xr-x 43.2 KB
config.sub -rwxr-xr-x 35.7 KB
configure -rwxr-xr-x 481.7 KB
configure.ac -rw-r--r-- 159.6 KB
install-sh -rwxr-xr-x 7.0 KB
pyconfig.h.in -rw-r--r-- 42.2 KB
setup.py -rw-r--r-- 99.7 KB

README.rst

back to top