Browse Source

bpo-34623: Mention CVE-2018-14647 in news entry (GH-9482)

https://bugs.python.org/issue34623
pull/9460/head
Christian Heimes 8 years ago
committed by Miss Islington (bot)
parent
commit
026337a710
  1. 4
      Misc/NEWS.d/next/Security/2018-09-10-16-05-39.bpo-34623.Ua9jMv.rst

4
Misc/NEWS.d/next/Security/2018-09-10-16-05-39.bpo-34623.Ua9jMv.rst

@ -1,2 +1,2 @@
The C accelerated _elementtree module now initializes hash randomization
salt from _Py_HashSecret instead of libexpat's default CSPRNG.
CVE-2018-14647: The C accelerated _elementtree module now initializes hash
randomization salt from _Py_HashSecret instead of libexpat's default CSPRNG.
Loading…
Cancel
Save