| commit | c8ff46032f2290ef848aea9485d376dc156347bd | [log] [tgz] |
|---|---|---|
| author | Gregory P. Smith <greg@krypto.org> | Wed Mar 14 15:28:10 2012 -0700 |
| committer | Gregory P. Smith <greg@krypto.org> | Wed Mar 14 15:28:10 2012 -0700 |
| tree | 2b202a90f3eacd23cfa10de65e34892c4806e0f4 | |
| parent | f590e0458edd040efd08ec1cfc006a934d386ecd [diff] |
Fixes Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash table internal to the pyexpat module's copy of the expat library to avoid a denial of service due to hash collisions. Patch by David Malcolm with some modifications by the expat project.