Fedora alert FEDORA-2013-20155 (python-backports-ssl_match_hostname)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 19 Update: python-backports-ssl_match_hostname-3.4.0.2-1.fc19 | |
| Date: | Tue, 05 Nov 2013 02:56:19 +0000 | |
| Message-ID: | <20131105025619.6619F21D3A@bastion01.phx2.fedoraproject.org> | |
| Archive‑link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-20155 2013-10-29 02:10:40 -------------------------------------------------------------------------------- Name : python-backports-ssl_match_hostname Product : Fedora 19 Version : 3.4.0.2 Release : 1.fc19 URL : https://bitbucket.org/brandon/backports.ssl_match_hostname Summary : The ssl.match_hostname() function from Python 3 Description : The Secure Sockets layer is only actually secure if you check the hostname in the certificate returned by the server to which you are connecting, and verify that it matches to hostname that you are trying to reach. But the matching logic, defined in RFC2818, can be a bit tricky to implement on your own. So the ssl package in the Standard Library of Python 3.2 now includes a match_hostname() function for performing this check instead of requiring every application to implement the check separately. This backport brings match_hostname() to users of earlier versions of Python. The actual code inside comes verbatim from Python 3.2. -------------------------------------------------------------------------------- Update Information: Fixes issue raised in this upstream bug report: http://bugs.python.org/issue17997#msg194950 -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 27 2013 Toshio Kuratomi <toshio@fedoraproject.org> - 3.4.0.2-1 - Update to upstream 3.4.0.2 for a security fix - http://bugs.python.org/issue17997 * Mon Sep 2 2013 Ian Weller <iweller@redhat.com> - 3.4.0.1-1 - Update to upstream 3.4.0.1 * Mon Aug 19 2013 Ian Weller <iweller@redhat.com> - 3.2-0.5.a3 - Use python-backports instead of providing backports/__init__.py * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2-0.4.a3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update python-backports-ssl_match_hostname' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...