👩💻 Join our community of thousands of amazing developers!
There’s security content in the releases, let’s dive right in. gh-108310: Fixed an issue where instances of ssl.SSLSocket were vulnerable to a bypass of the TLS handshake and included protections (like certificate verification) and treating sent unencrypted data as if it were post-handshake TLS encrypted data. Security issue reported as CVE-2023-40217 1 by Aapo Oksman. Patch by Gregory P. Smith. Upgrading is highly recommended to all users of affected versions. Python 3.11.5 Get it here: htt...