summaryrefslogtreecommitdiffstats
path: root/Misc/NEWS
diff options
context:
space:
mode:
authorAntoine Pitrou <solipsis@pitrou.net>2013-05-18 15:56:42 (GMT)
committerAntoine Pitrou <solipsis@pitrou.net>2013-05-18 15:56:42 (GMT)
commit636f93c63ba286249c1207e3a903f8429efb2041 (patch)
tree9a8053ff51254cfbd7b4b6437e699f21ae17338e /Misc/NEWS
parentef9683b73f8980fb7cfa39166670d3998b092804 (diff)
downloadcpython-636f93c63ba286249c1207e3a903f8429efb2041.zip
cpython-636f93c63ba286249c1207e3a903f8429efb2041.tar.gz
cpython-636f93c63ba286249c1207e3a903f8429efb2041.tar.bz2
Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of service using certificates with many wildcards (CVE-2013-2099).
Diffstat (limited to 'Misc/NEWS')
-rw-r--r--Misc/NEWS3
1 files changed, 3 insertions, 0 deletions
diff --git a/Misc/NEWS b/Misc/NEWS
index 14be939..1a516b7 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -24,6 +24,9 @@ Core and Builtins
Library
-------
+- Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of
+ service using certificates with many wildcards (CVE-2013-2099).
+
- Issue #17981: Closed socket on error in SysLogHandler.
- Fix typos in the multiprocessing module.