[issue34623] _elementtree.c doesn't call XML_SetHashSalt()

Matej Cepl report at bugs.python.org
Fri Jan 25 16:09:57 EST 2019


Matej Cepl <mcepl at cepl.eu> added the comment:

> Will this change be backported to 3.5 and 3.4? It applied cleanly on both however on 3.4 there is a test failure:

It actually haven't applied cleanly to me on Python 3.4.6 (SLE-12 package). Apparently self->parser has to be changed into self_xp->parser. Then all tests passed for me.

If any Linux maintainer wants to take this patch.

----------
nosy: +mcepl
Added file: https://bugs.python.org/file48077/CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue34623>
_______________________________________


More information about the Python-bugs-list mailing list