summaryrefslogtreecommitdiffstats
path: root/Misc/NEWS.d/next/Security/2019-01-15-18-16-05.bpo-35746.nMSd0j.rst
blob: dffe347eec846ef61f480d4e9d003ef7a45e8368 (plain)
1
2
3
[CVE-2019-5010] Fix a NULL pointer deref in ssl module. The cert parser did
not handle CRL distribution points with empty DP or URI correctly. A
malicious or buggy certificate can result into segfault.