UbuntuUpdates.org

Package "python-openssl"

Name: python-openssl

Description:

Python wrapper around the OpenSSL library

Latest version: 0.12-1ubuntu2.1
Release: precise (12.04)
Level: security
Repository: main
Head package: pyopenssl
Homepage: http://launchpad.net/pyopenssl

Links


Download "python-openssl"


Other versions of "python-openssl" in Precise

Repository Area Version
base main 0.12-1ubuntu2
updates main 0.12-1ubuntu2.1

Changelog

Version: 0.12-1ubuntu2.1 2013-09-23 18:06:46 UTC

  pyopenssl (0.12-1ubuntu2.1) precise-security; urgency=low

  * SECURITY UPDATE: incorrect ssl cert validation via NUL byte in
    subjectAltName
    - debian/patches/CVE-2013-4314.patch: fix leak in OpenSSL/crypto/x509.c,
      properly handle subjectAltName in OpenSSL/crypto/x509ext.c, added
      tests to OpenSSL/test/test_crypto.py.
    - CVE-2013-4314
  * debian/patches/remove_sslv2_test.patch: fix test suite failure by
    removing SSLv2 in test_method as openssl in precise doesn't enable it.
 -- Marc Deslauriers <email address hidden> Mon, 23 Sep 2013 10:00:40 -0400

CVE-2013-4314 hostname check bypassing vulnerability



About   -   Send Feedback to @ubuntu_updates