summaryrefslogtreecommitdiffstats
path: root/Misc
diff options
context:
space:
mode:
authorAntoine Pitrou <solipsis@pitrou.net>2013-05-18 15:59:12 (GMT)
committerAntoine Pitrou <solipsis@pitrou.net>2013-05-18 15:59:12 (GMT)
commit31fb419908c63419b4f725e1ad457a9fd0eee526 (patch)
treea3c8e3a3bb4823643289d8e4d06d92f97019664d /Misc
parent1a8c3e247a2c41c1f3a9eceb39bb0e9e5a3d0c6f (diff)
parent636f93c63ba286249c1207e3a903f8429efb2041 (diff)
downloadcpython-31fb419908c63419b4f725e1ad457a9fd0eee526.zip
cpython-31fb419908c63419b4f725e1ad457a9fd0eee526.tar.gz
cpython-31fb419908c63419b4f725e1ad457a9fd0eee526.tar.bz2
Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of service using certificates with many wildcards (CVE-2013-2099).
Diffstat (limited to 'Misc')
-rw-r--r--Misc/NEWS3
1 files changed, 3 insertions, 0 deletions
diff --git a/Misc/NEWS b/Misc/NEWS
index 68902e5..2bc763f 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -94,6 +94,9 @@ Core and Builtins
Library
-------
+- Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of
+ service using certificates with many wildcards (CVE-2013-2099).
+
- Issue #15758: Fix FileIO.readall() so it no longer has O(n**2) complexity.
- Issue #14596: The struct.Struct() objects now use more compact implementation.