[Python-Dev] Status of 3.2 in Hg repository?

Antoine Pitrou solipsis at pitrou.net
Tue Aug 20 10:10:39 CEST 2013


Hi Tim,

Le Mon, 19 Aug 2013 23:25:58 -0500,
Tim Peters <tim.peters at gmail.com> a écrit :
> > hg log -r 3.2
> changeset:   83826:b9b521efeba3
> branch:      3.2
> parent:      83739:6255b40c6a61
> user:        Antoine Pitrou <solipsis at pitrou.net>
> date:        Sat May 18 17:56:42 2013 +0200
> summary:     Issue #17980: Fix possible abuse of ssl.match_hostname()
> for denial of service using certificates with many wildcards
> (CVE-2013-2099).

Oops, that's me :-S
Now I don't remember if I omitted to merge deliberately, or if that was
an oversight.

For the record, the issue was fixed in 3.3 too, albeit not with a merge
changeset.

Regards

Antoine.




More information about the Python-Dev mailing list