cpython/Misc/NEWS.d/next
William Woodruff 0876b921b2
gh-107361: strengthen default SSL context flags (#112389)
This adds `VERIFY_X509_STRICT` to make the default
SSL context perform stricter (per RFC 5280) validation, as well
as `VERIFY_X509_PARTIAL_CHAIN` to enforce more standards-compliant
path-building behavior.

As part of this changeset, I had to tweak `make_ssl_certs.py`
slightly to emit 5280-conforming CA certs. This changeset includes
the regenerated certificates after that change.

Signed-off-by: William Woodruff <william@yossarian.net>
Co-authored-by: Victor Stinner <vstinner@python.org>
2024-03-06 13:44:58 -08:00
..
Build GH-116313: get WASI builds to run under wasmtime 18 w/ WASI 0.2/preview2 primitives (#116327) 2024-03-05 09:18:53 +01:00
C API gh-114626: Add again _PyCFunctionFastWithKeywords name (GH-115561) 2024-02-19 13:20:46 +01:00
Core and Builtins gh-116381: Specialize CONTAINS_OP (GH-116385) 2024-03-07 03:30:11 +08:00
Documentation gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) 2024-02-21 12:26:16 +01:00
IDLE gh-88516: show file proxy icon in IDLE editor windows on macOS (#112894) 2024-02-23 02:15:39 +00:00
Library gh-107361: strengthen default SSL context flags (#112389) 2024-03-06 13:44:58 -08:00
macOS Python 3.13.0a4 2024-02-15 14:38:42 +01:00
Security gh-115398: Increment PyExpat_CAPI_MAGIC for SetReparseDeferralEnabled addition (GH-116301) 2024-03-04 10:36:27 +00:00
Tests gh-71052: Add test exclusions to support running the test suite on Android (#115918) 2024-02-29 22:32:50 +01:00
Tools-Demos bpo-45101: Add consistency in usage message IO between 2 versions of python-config (GH-28162) 2024-02-26 22:04:44 +02:00
Windows gh-115554: Improved logic for handling multiple existing py.exe launcher installs (GH-115793) 2024-03-01 12:58:27 +00:00