Issued:

2018-04-10

Updated:

2018-04-10

RHBA-2018:0930 - python-backports-ssl_match_hostname bug fix update

Synopsis

python-backports-ssl_match_hostname bug fix update

Type/Severity

Bug Fix Advisory None

Topic

An update for python-backports-ssl_match_hostname is now available for Red Hat Enterprise Linux 7.

Description

The python-backports-ssl_match_hostname package brings match_hostname() to users of earlier versions of Python.

The Secure Sockets layer is only actually secure if you check the hostname in the certificate returned by the server to which you are connecting, and verify that it matches the hostname you are trying to reach.

However, the matching logic, defined in RFC2818, can be a bit tricky to implement on your own. This package backports the match_hostname() function included in the ssl package in the Standard Library of Python 3.2 for performing this check instead of requiring every application to implement the check separately.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.

Users of python-backports-ssl_match_hostname are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• python-backports-ssl_match_hostname-3.5.0.1-1.el7.src.rpm
• python-backports-ssl_match_hostname-3.5.0.1-1.el7.noarch.rpm

Fixes

• This content is not included.BZ - 1500373

CVEs

(none)

References

• https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.