CVE-2023-40217

[rickprice]

Fixes for CVE-2023-40217

[icanhasmath]

Why can't this test succeed?
ca51933

[icanhasmath]

Socket should be available in python2 : https://docs.python.org/2.7/library/socket.html

[rickprice]

The problem is, Socket has to support being a resource ie "using", and I don't believe it does in Python2, from the failures I was getting.

[rickprice]

Why can't this test succeed? ca51933

I need to look into it again, I believe that was the Enum problem I was having.

[rickprice]

Why can't this test succeed? ca51933

I'm not sure now, maybe we should put it back in?
I hate giving up tests.
There would have been a reason I removed it, but its also possible that everything is fixed now.

Ah, so the problem was that they are using an Enum to list the available versions of SSL, and Python2 just doesn't have Enums in core. If we wanted this, we would have to rewrite stuff to use something other than an Enum. I think that's possible.

[icanhasmath]

Looks good - Tested consistently.