[Python-checkins] bpo-34623: Mention CVE-2018-14647 in news entry (GH-9482)

Miss Islington (bot) webhook-mailer at python.org
Sat Sep 22 00:42:33 EDT 2018


https://github.com/python/cpython/commit/026337a7101369297c8083047d2f3c6fc9dd1e2b
commit: 026337a7101369297c8083047d2f3c6fc9dd1e2b
branch: master
author: Christian Heimes <christian at python.org>
committer: Miss Islington (bot) <31488909+miss-islington at users.noreply.github.com>
date: 2018-09-21T21:42:29-07:00
summary:

bpo-34623: Mention CVE-2018-14647 in news entry (GH-9482)



https://bugs.python.org/issue34623

files:
M Misc/NEWS.d/next/Security/2018-09-10-16-05-39.bpo-34623.Ua9jMv.rst

diff --git a/Misc/NEWS.d/next/Security/2018-09-10-16-05-39.bpo-34623.Ua9jMv.rst b/Misc/NEWS.d/next/Security/2018-09-10-16-05-39.bpo-34623.Ua9jMv.rst
index 31ad92ef8582..cbaa4b750644 100644
--- a/Misc/NEWS.d/next/Security/2018-09-10-16-05-39.bpo-34623.Ua9jMv.rst
+++ b/Misc/NEWS.d/next/Security/2018-09-10-16-05-39.bpo-34623.Ua9jMv.rst
@@ -1,2 +1,2 @@
-The C accelerated _elementtree module now initializes hash randomization
-salt from _Py_HashSecret instead of libexpat's default CSPRNG.
+CVE-2018-14647: The C accelerated _elementtree module now initializes hash
+randomization salt from _Py_HashSecret instead of libexpat's default CSPRNG.



More information about the Python-checkins mailing list