diff options
| author | Gregory P. Smith <greg@krypto.org> | 2012-03-14 22:00:39 (GMT) |
|---|---|---|
| committer | Gregory P. Smith <greg@krypto.org> | 2012-03-14 22:00:39 (GMT) |
| commit | 70c9c4dca6bcb9b304c48915b32af74d133c01cc (patch) | |
| tree | ced377b024f112cc9cecb46c719582752393cbac /Misc | |
| parent | e7c8fdee18494238cc93eb895001398ceb7d12fb (diff) | |
| parent | 373c7409245bb22da1e6e45ba1cb3818904c51a9 (diff) | |
| download | cpython-70c9c4dca6bcb9b304c48915b32af74d133c01cc.zip cpython-70c9c4dca6bcb9b304c48915b32af74d133c01cc.tar.gz cpython-70c9c4dca6bcb9b304c48915b32af74d133c01cc.tar.bz2 | |
Fixes Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes
in the hash table internal to the pyexpat module's copy of the expat
library to avoid a denial of service due to hash collisions.
Patch by David Malcolm with some modifications by the expat project.
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/NEWS | 5 |
1 files changed, 5 insertions, 0 deletions
@@ -24,6 +24,11 @@ Core and Builtins Library ------- +- Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash + table internal to the pyexpat module's copy of the expat library to avoid a + denial of service due to hash collisions. Patch by David Malcolm with some + modifications by the expat project. + - Issue #14200: Idle shell crash on printing non-BMP unicode character. - Issue #12818: format address no longer needlessly \ escapes ()s in names when |