Matej Cepl 311f19ba89 - (bsc#1215454, gh-108310)Fixed an issue where instances ...

of ssl.SSLSocket were vulnerable to a bypass of the TLS
    handshake and included protections (like certificate
    verification) and treating sent unencrypted data as if it
    were post-handshake TLS encrypted data.  Security issue
    reported as CVE-2023-40217 by Aapo Oksman. Patch by Gregory
    P. Smith.
- Update to 3.9.17 (bsc#1212015):
  * Support Expat >= 2.4.4 (jsc#SLE-21253, CVE-2022-25236)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python39?expand=0&rev=165

2023-10-13 16:13:04 +00:00

2.1 KiB

Raw Permalink Blame History

View Raw