[libvirt] [sandbox PATCH 01/11] Add virt-sandbox-image

Guido Günther agx at sigxcpu.org
Fri Jul 31 07:15:13 UTC 2015


On Thu, Jul 23, 2015 at 03:57:27PM +0000, Eren Yagdiran wrote:
[..snip..]
> +def get_url(server, path, headers):
> +    url = "https://" + server + path
> +    debug("  Fetching %s..." % url)
> +    
> +    req = urllib2.Request(url=url)

This does not seem to do any certificate validation (just in case this
ends up in a distro's /usr/bin/ I can already see the CVE forthcoming).

Cheers,
 -- Guido




More information about the libvir-list mailing list