+5
-1
lines changedFilter options
+5
-1
lines changed Original file line number Diff line number Diff line change
@@ -13,6 +13,9 @@ Core and Builtins
13
13
Library
14
14
-------
15
15
16
+
- Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC
17
+
IV attack countermeasure.
18
+
16
19
- Issue #11603: Fix a crash when __str__ is rebound as __repr__. Patch by
17
20
Andreas Stührk.
18
21
Original file line number Diff line number Diff line change
@@ -365,7 +365,8 @@ newPySSLObject(PySocketSockObject *Sock, char *key_file, char *cert_file,
365
365
}
366
366
367
367
/* ssl compatibility */
368
-
SSL_CTX_set_options(self->ctx, SSL_OP_ALL);
368
+
SSL_CTX_set_options(self->ctx,
369
+
SSL_OP_ALL & ~SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);
369
370
370
371
verification_mode = SSL_VERIFY_NONE;
371
372
if (certreq == PY_SSL_CERT_OPTIONAL)
You can’t perform that action at this time.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4