-------- Forwarded Message --------
Subject: [Security-announce][CVE-2026-115557] Distrust compromised intermediate
certificates in ssl module
Date: Sat, 24 Oct 2026 14:20:01 +0000
From: Seth Larson <[email protected]>
Reply-To: [email protected]
To: [email protected]
Python has added a denylist for known compromised certificates to the "ssl"
module to ensure user safety even without certificate revocation configured.
Known compromised certificates on this denylist will automatically be rejected
regardless of the SSLContext policy configuration.
Please see the linked CVE ID for more information:
* https://www.cve.org/CVERecord?id=CVE-2026-115557
* https://github.com/python/cpython/pull/160042
_______________________________________________
Security-announce mailing list -- [email protected]
https://mail.python.org/mailman3//lists/security-announce.python.org
