diff options
| author | Christian Heimes <christian@python.org> | 2016-09-06 18:06:47 (GMT) |
|---|---|---|
| committer | Christian Heimes <christian@python.org> | 2016-09-06 18:06:47 (GMT) |
| commit | 03d13c0cbfe912eb0f9b9a02987b9e569f25fe19 (patch) | |
| tree | 280ce194ae1bb849fb586da92e4de7e636f08476 /Misc | |
| parent | cbef66d7111624381eba9c4cf734e4017f4d7c3f (diff) | |
| download | cpython-03d13c0cbfe912eb0f9b9a02987b9e569f25fe19.zip cpython-03d13c0cbfe912eb0f9b9a02987b9e569f25fe19.tar.gz cpython-03d13c0cbfe912eb0f9b9a02987b9e569f25fe19.tar.bz2 | |
Issues #27850 and #27766: Remove 3DES from ssl default cipher list and add ChaCha20 Poly1305.
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/NEWS | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -60,6 +60,12 @@ Core and Builtins Library ------- +- Issue #27850: Remove 3DES from ssl module's default cipher list to counter + measure sweet32 attack (CVE-2016-2183). + +- Issue #27766: Add ChaCha20 Poly1305 to ssl module's default ciper list. + (Required OpenSSL 1.1.0 or LibreSSL). + - Issue #26470: Port ssl and hashlib module to OpenSSL 1.1.0. - Remove support for passing a file descriptor to os.access. It never worked but |