Skip to content

CVE-2012-0876 (hash table collisions CPU usage DoS) for embedded copy of expat #58442

@davidmalcolm

Description

@davidmalcolm
BPO 14234
Nosy @warsaw, @birkenfeld, @gpshead, @amauryfa, @pitrou, @benjaminp, @davidmalcolm, @JimJJewett
Files
  • expat-hash-randomization.patch: Patch against devel branch to add fix for CVE-2012-0876 to embedded copy of expat and to use it in pyexpat
  • expat-hash-randomization-002.patch
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/gpshead'
    closed_at = <Date 2012-03-15.01:28:27.440>
    created_at = <Date 2012-03-09.00:56:30.606>
    labels = ['expert-XML', 'release-blocker']
    title = 'CVE-2012-0876 (hash table collisions CPU usage DoS) for embedded copy of expat'
    updated_at = <Date 2012-03-18.19:40:10.000>
    user = 'https://github.com/davidmalcolm'

    bugs.python.org fields:

    activity = <Date 2012-03-18.19:40:10.000>
    actor = 'python-dev'
    assignee = 'gregory.p.smith'
    closed = True
    closed_date = <Date 2012-03-15.01:28:27.440>
    closer = 'gregory.p.smith'
    components = ['XML']
    creation = <Date 2012-03-09.00:56:30.606>
    creator = 'dmalcolm'
    dependencies = []
    files = ['24762', '24831']
    hgrepos = []
    issue_num = 14234
    keywords = ['patch']
    message_count = 27.0
    messages = ['155198', '155217', '155258', '155262', '155263', '155474', '155516', '155687', '155690', '155694', '155695', '155720', '155722', '155785', '155791', '155808', '155811', '155812', '155827', '155829', '155832', '155835', '155840', '155921', '155956', '156086', '156267']
    nosy_count = 10.0
    nosy_names = ['barry', 'georg.brandl', 'gregory.p.smith', 'amaury.forgeotdarc', 'pitrou', 'benjamin.peterson', 'Arfrever', 'dmalcolm', 'python-dev', 'Jim.Jewett']
    pr_nums = []
    priority = 'release blocker'
    resolution = 'fixed'
    stage = None
    status = 'closed'
    superseder = None
    type = None
    url = 'https://bugs.python.org/issue14234'
    versions = ['Python 2.6', 'Python 3.1', 'Python 2.7', 'Python 3.2', 'Python 3.3']

    Metadata

    Metadata

    Assignees

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions