[Pkg-bazaar-maint] Processed: Re: Bug#708530: python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard

Mon May 20 15:21:23 UTC 2013

Processing control commands:

> clone -1 -2 -3 -4 -5 -6 -7
Bug #708530 [python3.3] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Bug 708530 cloned as bugs 709066-709071
> reassign -2 python2.7 2.7.3-11
Bug #709066 [python3.3] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Bug reassigned from package 'python3.3' to 'python2.7'.
No longer marked as found in versions python3.3/3.3.1-1.
Ignoring request to alter fixed versions of bug #709066 to the same values previously set
Bug #709066 [python2.7] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Marked as found in versions python2.7/2.7.3-11.
> retitle -2 python2.7: possible abuse of ssl.match_hostname() for DoS usings certs with many wildcards
Bug #709066 [python2.7] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Changed Bug title to 'python2.7: possible abuse of ssl.match_hostname() for DoS usings certs with many wildcards' from 'python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard'
> reassign -3 linkchecker
Bug #709067 [python3.3] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Bug reassigned from package 'python3.3' to 'linkchecker'.
No longer marked as found in versions python3.3/3.3.1-1.
Ignoring request to alter fixed versions of bug #709067 to the same values previously set
> retitle -3 linkchecker: possible abuse of match_hostname() for DoS usings certs with many wildcards
Bug #709067 [linkchecker] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Changed Bug title to 'linkchecker: possible abuse of match_hostname() for DoS usings certs with many wildcards' from 'python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard'
> reassign -4 python-bzrlib
Bug #709068 [python3.3] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Bug reassigned from package 'python3.3' to 'python-bzrlib'.
No longer marked as found in versions python3.3/3.3.1-1.
Ignoring request to alter fixed versions of bug #709068 to the same values previously set
> retitle -4 python-bzrlib: possible abuse of match_hostname() for DoS usings certs with many wildcards
Bug #709068 [python-bzrlib] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Changed Bug title to 'python-bzrlib: possible abuse of match_hostname() for DoS usings certs with many wildcards' from 'python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard'
> reassign -5 src:python-tornado
Bug #709069 [python3.3] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Bug reassigned from package 'python3.3' to 'src:python-tornado'.
No longer marked as found in versions python3.3/3.3.1-1.
Ignoring request to alter fixed versions of bug #709069 to the same values previously set
> retitle -5 python(3)-tornado: possible abuse of match_hostname() for DoS usings certs with many wildcards
Bug #709069 [src:python-tornado] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Changed Bug title to 'python(3)-tornado: possible abuse of match_hostname() for DoS usings certs with many wildcards' from 'python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard'
> reassign -6 src:python-urllib
Bug #709070 [python3.3] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Bug reassigned from package 'python3.3' to 'src:python-urllib'.
Warning: Unknown package 'src:python-urllib'
Warning: Unknown package 'src:python-urllib'
No longer marked as found in versions python3.3/3.3.1-1.
Warning: Unknown package 'src:python-urllib'
Warning: Unknown package 'src:python-urllib'
Ignoring request to alter fixed versions of bug #709070 to the same values previously set
Warning: Unknown package 'src:python-urllib'
> retitle -6 python(3)-urllib3: possible abuse of match_hostname() for DoS usings certs with many wildcards
Bug #709070 [src:python-urllib] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Warning: Unknown package 'src:python-urllib'
Changed Bug title to 'python(3)-urllib3: possible abuse of match_hostname() for DoS usings certs with many wildcards' from 'python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard'
Warning: Unknown package 'src:python-urllib'
> reassign -7 w3af-console
Bug #709071 [python3.3] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Bug reassigned from package 'python3.3' to 'w3af-console'.
No longer marked as found in versions python3.3/3.3.1-1.
Ignoring request to alter fixed versions of bug #709071 to the same values previously set
> retitle -7 w3af-console: possible abuse of match_hostname() for DoS usings certs with many wildcards
Bug #709071 [w3af-console] python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard
Changed Bug title to 'w3af-console: possible abuse of match_hostname() for DoS usings certs with many wildcards' from 'python3: CVE-2013-2099: ssl.match_hostname() trips over crafted wildcard'

-- 
708530: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708530
709066: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709066
709067: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709067
709068: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709068
709069: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709069
709070: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709070
709071: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709071
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems