+5
-1
lines changedFilter options
+5
-1
lines changed Original file line number Diff line number Diff line change
@@ -13,6 +13,9 @@ Core and Builtins
13
13
Library
14
14
-------
15
15
16
+
- Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC
17
+
IV attack countermeasure.
18
+
16
19
17
20
What's New in Python 2.6.7?
18
21
===========================
Original file line number Diff line number Diff line change
@@ -357,7 +357,8 @@ newPySSLObject(PySocketSockObject *Sock, char *key_file, char *cert_file,
357
357
}
358
358
359
359
/* ssl compatibility */
360
-
SSL_CTX_set_options(self->ctx, SSL_OP_ALL);
360
+
SSL_CTX_set_options(self->ctx,
361
+
SSL_OP_ALL & ~SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);
361
362
362
363
verification_mode = SSL_VERIFY_NONE;
363
364
if (certreq == PY_SSL_CERT_OPTIONAL)
You can’t perform that action at this time.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4