Hi Tim,

Le Mon, 19 Aug 2013 23:25:58 -0500,
Tim Peters <[email protected]> a écrit :
> > hg log -r 3.2
> changeset:   83826:b9b521efeba3
> branch:      3.2
> parent:      83739:6255b40c6a61
> user:        Antoine Pitrou <[email protected]>
> date:        Sat May 18 17:56:42 2013 +0200
> summary:     Issue #17980: Fix possible abuse of ssl.match_hostname()
> for denial of service using certificates with many wildcards
> (CVE-2013-2099).

Oops, that's me :-S
Now I don't remember if I omitted to merge deliberately, or if that was
an oversight.

For the record, the issue was fixed in 3.3 too, albeit not with a merge
changeset.

Regards

Antoine.


_______________________________________________
Python-Dev mailing list
[email protected]
http://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Reply via email to