oss-security - CVE request: ssl.match_hostname(): sub string wildcard should not match IDNA prefix

Message-ID: <87iobqdzot.fsf@redhat.com>
Date: Mon, 18 May 2015 11:04:18 +0200
From: Martin Prpic <mprpic@...hat.com>
To: "OSS Security Mailinglist" <oss-security@...ts.openwall.com>
Subject: CVE request: ssl.match_hostname(): sub string wildcard should not match IDNA prefix

Hi,

Has there been a CVE assigned for the following issue? If not, can one
please be assigned?

https://bugs.python.org/issue17997
https://hg.python.org/cpython/rev/10d0edadbcdd/

Thank you!

-- 
Martin Prpič / Red Hat Product Security

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.