issue 32185: SSLContext.wrap_socket sends SNI Extension when server_hostname is IP

Bug #1755447 reported by Matthias Klose
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Python
Fix Released
Unknown
python2.7 (Debian)
Fix Released
Unknown
python2.7 (Ubuntu)
Fix Released
Undecided
Unassigned
Trusty
Won't Fix
Undecided
Unassigned
Xenial
Won't Fix
Undecided
Unassigned
Artful
Won't Fix
Undecided
Unassigned
Bionic
Fix Released
Undecided
Unassigned
python3.4 (Debian)
Fix Released
Unknown
python3.4 (Ubuntu)
Trusty
Won't Fix
Undecided
Unassigned
python3.5 (Debian)
Fix Released
Unknown
python3.5 (Ubuntu)
Xenial
Won't Fix
Undecided
Unassigned
python3.6 (Ubuntu)
Fix Released
Undecided
Unassigned
Artful
Won't Fix
Undecided
Unassigned
Bionic
Fix Released
Undecided
Unassigned
python3.7 (Ubuntu)
Fix Released
Undecided
Unassigned
Artful
Won't Fix
Undecided
Unassigned
Bionic
Fix Released
Undecided
Unassigned

Bug Description

the fix for https://bugs.python.org/issue32185 needs backports for the stable releases.

Matthias Klose (doko)
no longer affects: python3.6 (Ubuntu Trusty)
no longer affects: python3.6 (Ubuntu Xenial)
no longer affects: python3.7 (Ubuntu Trusty)
no longer affects: python3.7 (Ubuntu Xenial)
no longer affects: python3.5 (Ubuntu Bionic)
no longer affects: python3.5 (Ubuntu Artful)
no longer affects: python3.5 (Ubuntu Trusty)
no longer affects: python3.4 (Ubuntu Xenial)
no longer affects: python3.4 (Ubuntu Artful)
no longer affects: python3.4 (Ubuntu Bionic)
Changed in python:
status: Unknown → Fix Released
Changed in python2.7 (Debian):
status: Unknown → New
Changed in python3.4 (Debian):
status: Unknown → New
Changed in python3.5 (Debian):
status: Unknown → New
tags: added: id-5ab94dc293d432f0a6d08cc2
Steve Langasek (vorlon)
Changed in python2.7 (Ubuntu Artful):
status: New → Won't Fix
Changed in python3.6 (Ubuntu Artful):
status: New → Won't Fix
Changed in python3.7 (Ubuntu Artful):
status: New → Won't Fix
Revision history for this message
Steve Langasek (vorlon) wrote :

Fixed on upstream 3.6 branch in February; so that's resolved for 3.6.5 and later (3.6.5 tagged Mar 28).

Changed in python3.6 (Ubuntu):
status: New → Fix Released
Changed in python3.6 (Ubuntu Bionic):
status: New → Fix Released
Revision history for this message
Steve Langasek (vorlon) wrote :

Was also fixed on python3.7 branch in February. 3.7.0~b3 (bionic version) was tagged March 29.

Changed in python3.7 (Ubuntu):
status: New → Fix Released
Changed in python3.7 (Ubuntu Bionic):
status: New → Fix Released
no longer affects: python3.5 (Ubuntu)
no longer affects: python3.4 (Ubuntu)
Steve Langasek (vorlon)
Changed in python3.4 (Ubuntu Trusty):
status: New → Won't Fix
Changed in python2.7 (Ubuntu Trusty):
status: New → Won't Fix
tags: added: fr-292
Revision history for this message
Steve Beattie (sbeattie) wrote :

For python2.7, this was fixed in https://github.com/python/cpython/commit/a5c9112300ecd492ed6cc9759dc8028766401f61 which landed in 2.7.15, so has been fixed in bionic-updates and newer.

Changed in python2.7 (Ubuntu Bionic):
status: New → Fix Released
Changed in python2.7 (Ubuntu):
status: New → Fix Released
Revision history for this message
Steve Beattie (sbeattie) wrote :

I am not aware of a security impact from this issue, so if it is to be addressed in xenial ESM, it would eed to go through a support request. closing the xenial tasks as Won't Fix.

Changed in python2.7 (Ubuntu Xenial):
status: New → Won't Fix
Changed in python3.5 (Ubuntu Xenial):
status: New → Won't Fix
Changed in python2.7 (Debian):
status: New → Fix Released
Changed in python3.4 (Debian):
status: New → Fix Released
Changed in python3.5 (Debian):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.