| commit | 373c7409245bb22da1e6e45ba1cb3818904c51a9 | [log] [tgz] |
|---|---|---|
| author | Gregory P. Smith <greg@krypto.org> | Wed Mar 14 14:41:00 2012 -0700 |
| committer | Gregory P. Smith <greg@krypto.org> | Wed Mar 14 14:41:00 2012 -0700 |
| tree | 0046658e32fe2018404b6d03936eab2d3c005092 | |
| parent | 9fd170e2d053bd86592b8728bdd00cf2d2a06d0b [diff] | |
| parent | 8e91cf6a5e5be8f84132498d5654d6ad2e4d54c2 [diff] |
Fixes Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash table internal to the pyexpat module's copy of the expat library to avoid a denial of service due to hash collisions. Patch by David Malcolm with some modifications by the expat project.