Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:15.2:Rings:1-MinimalX
python-urllib3
urllib3-cve-2019-11324.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File urllib3-cve-2019-11324.patch of Package python-urllib3
Index: urllib3-1.24/src/urllib3/util/ssl_.py =================================================================== --- urllib3-1.24.orig/src/urllib3/util/ssl_.py +++ urllib3-1.24/src/urllib3/util/ssl_.py @@ -323,7 +323,10 @@ def ssl_wrap_socket(sock, keyfile=None, if e.errno == errno.ENOENT: raise SSLError(e) raise - elif getattr(context, 'load_default_certs', None) is not None: + + # Don't load system certs unless there were no CA certs or + # SSLContext object specified manually. + elif ssl_context is None and hasattr(context, 'load_default_certs'): # try to load OS default certs; works well on Windows (require Python3.4+) context.load_default_certs() elif cert_reqs != ssl.CERT_NONE and hasattr(context, 'set_default_verify_paths'):
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor