commit | 8e91cf6a5e5be8f84132498d5654d6ad2e4d54c2 | [log] [tgz] |
---|---|---|
author | Gregory P. Smith <greg@krypto.org> | Wed Mar 14 14:26:55 2012 -0700 |
committer | Gregory P. Smith <greg@krypto.org> | Wed Mar 14 14:26:55 2012 -0700 |
tree | 3c473971bf386649c6a8179c48a59146cd85c63e | |
parent | 273cd1812a7c8646b52aa3afee1c5db5a0e539d6 [diff] |
Fixes issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash table internal to the pyexpat module's copy of the expat library to avoid a denial of service due to hash collisions. Patch by David Malcolm with some modifications by the expat project.