diff options
| author | Gregory P. Smith <greg@krypto.org> | 2012-03-14 21:26:55 (GMT) |
|---|---|---|
| committer | Gregory P. Smith <greg@krypto.org> | 2012-03-14 21:26:55 (GMT) |
| commit | 8e91cf6a5e5be8f84132498d5654d6ad2e4d54c2 (patch) | |
| tree | 3c473971bf386649c6a8179c48a59146cd85c63e /Misc | |
| parent | 273cd1812a7c8646b52aa3afee1c5db5a0e539d6 (diff) | |
| download | cpython-8e91cf6a5e5be8f84132498d5654d6ad2e4d54c2.zip cpython-8e91cf6a5e5be8f84132498d5654d6ad2e4d54c2.tar.gz cpython-8e91cf6a5e5be8f84132498d5654d6ad2e4d54c2.tar.bz2 | |
Fixes issue #14234: CVE-2012-0876: Randomize hashes of xml attributes
in the hash table internal to the pyexpat module's copy of the expat
library to avoid a denial of service due to hash collisions.
Patch by David Malcolm with some modifications by the expat project.
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/NEWS | 5 |
1 files changed, 5 insertions, 0 deletions
@@ -15,6 +15,11 @@ Core and Builtins service attacks due to hash collisions within the dict and set types. Patch by David Malcolm, based on work by Victor Stinner. +- Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash + table internal to the pyexpat module's copy of the expat library to avoid a + denial of service due to hash collisions. Patch by David Malcolm with some + modifications by the expat project. + Library ------- |