]> granicus.if.org Git - python/commit
projects / python / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: 01a513b a3811e4)
Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
authorChristian Heimes <christian@cheimes.de>
Fri, 16 Aug 2013 22:58:00 +0000 (00:58 +0200)
committerChristian Heimes <christian@cheimes.de>
Fri, 16 Aug 2013 22:58:00 +0000 (00:58 +0200)
commite06d47c70cbef8ae77efe0e64cde3e682b66cb05
tree0ef0b5989302c49cc67e9f729d6cc26f97f260cetree | snapshot
parent01a513b5d3d94c281f8b0eb8916af51ccddf8534commit | diff
parenta3811e4b8f70790a3dc8768a455cb8836670de37commit | diff
Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
inside subjectAltName correctly. Formerly the module has used OpenSSL's
GENERAL_NAME_print() function to get the string represention of ASN.1
strings for rfc822Name (email), dNSName (DNS) and
uniformResourceIdentifier (URI).
Lib/test/test_ssl.py diff1 | diff2 | blob | history
Misc/NEWS diff1 | diff2 | blob | history
Modules/_ssl.c diff1 | diff2 | blob | history
Unnamed repository; edit this file 'description' to name the repository.