Seth Larson on Mythryl: “Spent a large chunk of my day fixing two security vulnerabilities in…”

Spent a large chunk of my day fixing two security vulnerabilities in truststore. Most of the uses I'm aware of aren't affected (such as pip, for example), but these are good patches to apply. github.com/sethmlarson/... github.com/sethmlarson/... Excuse me while I rest now... 🛌💤 #python #security

github.comConcurrent handshakes with a shared `SSLContext` may disable certificate verification of subsequent handshakes on Windows and macOSConcurrent handshakes with a `truststore.SSLContext` instance may cause certificate verification to be permanently disabled on macOS and Windows platforms. This vulnerability does not affect Linux ...

12/10/26, 10:55 pm0 reposts6 likes

Post