[issue18709] SSL module fails to handle NULL bytes inside subjectAltNames general names (CVE-2013-4238)

Christian Heimes report at bugs.python.org
Sat Oct 19 12:17:50 CEST 2013


Christian Heimes added the comment:

I don't get it. Has somebody found a memory leak in my patch?

Larry, I have removed 2.7, 3.3 and 3.4 from the affected versions. They fix has already landed. 3.1 and 3.2 are still open, though.

Georg, the patch for 3.2 is still up to date. Are you going to commit it?

----------
versions:  -Python 2.7, Python 3.3, Python 3.4

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue18709>
_______________________________________


More information about the Python-bugs-list mailing list