summaryrefslogtreecommitdiff
path: root/Misc
diff options
context:
space:
mode:
authorAntoine Pitrou <solipsis@pitrou.net>2013-05-18 17:56:42 +0200
committerAntoine Pitrou <solipsis@pitrou.net>2013-05-18 17:56:42 +0200
commit636f93c63ba286249c1207e3a903f8429efb2041 (patch)
tree9a8053ff51254cfbd7b4b6437e699f21ae17338e /Misc
parentef9683b73f8980fb7cfa39166670d3998b092804 (diff)
downloadcpython-git-636f93c63ba286249c1207e3a903f8429efb2041.tar.gz
Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of service using certificates with many wildcards (CVE-2013-2099).
Diffstat (limited to 'Misc')
-rw-r--r--Misc/NEWS3
1 files changed, 3 insertions, 0 deletions
diff --git a/Misc/NEWS b/Misc/NEWS
index 14be9391d3..1a516b7739 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -24,6 +24,9 @@ Core and Builtins
Library
-------
+- Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of
+ service using certificates with many wildcards (CVE-2013-2099).
+
- Issue #17981: Closed socket on error in SysLogHandler.
- Fix typos in the multiprocessing module.