Path: csiph.com!fu-berlin.de!uni-berlin.de!not-for-mail
From: Jean-Paul Calderone <exarkun@twistedmatrix.com>
Newsgroups: comp.lang.python.announce
Subject: Announcing txAWS 0.2.3.1
Date: Mon, 9 Jan 2017 12:58:24 -0500
Lines: 22
Approved: python-announce-list@python.org
Message-ID: <mailman.443.1484036356.2395.python-announce-list@python.org>
References: <CAEeXt4PSgAGjFbj50=mUytatk5=0tu_UzhV6au+gvqCfWP_a7Q@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
X-Trace: news.uni-berlin.de NT8Q2F+h63uTN4akZIsHsQCHPlFQ68E2FCQOIUoZrRSA==
Return-Path: <exarkun@twistedmatrix.com>
X-Original-To: python-announce-list@python.org
Delivered-To: python-announce-list@mail.python.org
X-Spam-Status: OK 0.003
X-Spam-Evidence: '*H*': 0.99; '*S*': 0.00; 'sponsoring': 0.05; 'url:github': 0.05; 'alter': 0.07; 'apis': 0.07; 'defaults': 0.07; 'false.': 0.07; 'pypi': 0.07; 'received:66.35': 0.09; 'requested.': 0.09; 'received:209.85.218': 0.10; '&lt;&gt;.': 0.16; '(aws)': 0.16; 'github,': 0.16; 'interacting': 0.16; 'jean- paul': 0.16; 'possibly,': 0.16; 'received:209.85.218.51': 0.16; 'received:mail-oi0-f51.google.com': 0.16; 'tls': 0.16; 'library': 0.20; 'forms.': 0.22; 'fix': 0.23; "i've": 0.24; 'requests': 0.25; 'message-id:@mail.gmail.com': 0.25; 'least': 0.26; 'parameter': 0.29; 'amazon': 0.31; '8bit%:13': 0.32; 'received:google.com': 0.32; 'source': 0.32; 'affects': 0.33; 'could': 0.34; 'instead': 0.35; 'release': 0.35; 'received:209.85': 0.36; 'or,': 0.36; 'thanks': 0.37; 'to:addr:python-list': 0.38; 'received:209': 0.38; 'issue': 0.39; 'received:66': 0.39; 'application': 0.39; 'to:addr:python.org': 0.39; 'proto:https': 0.40; 'received:io': 0.40; 'received:psf.io': 0.40; 'default': 0.61; 'information': 0.62; 'to:no real name:2**2': 0.64; 'services': 0.66; 'home': 0.68; 'special': 0.71; 'to:addr:python-announce-list': 0.71; 'subject:Announcing': 0.84; 'vulnerable': 0.84; 'wheel': 0.91; 'verified.': 0.93
X-Gm-Message-State: AIkVDXJGKJKXFoQrzQFjJPT3faTptVhepvWoFjEZ1m2wr9v4QzuEZcguquz3NAOAHtbrN/yxx5M1h2NFLsJbqg==
X-Received: by 10.157.8.75 with SMTP id 69mr6974522oty.275.1483984704874; Mon, 09 Jan 2017 09:58:24 -0800 (PST)
X-Gmail-Original-Message-ID: <CAEeXt4PSgAGjFbj50=mUytatk5=0tu_UzhV6au+gvqCfWP_a7Q@mail.gmail.com>
X-Mailman-Approved-At: Tue, 10 Jan 2017 03:19:15 -0500
X-Content-Filtered-By: Mailman/MimeDel 2.1.23
X-BeenThere: python-announce-list@python.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: Announcement-only list for the Python programming language <python-announce-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-announce-list>, <mailto:python-announce-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-announce-list/>
List-Post: <mailto:python-announce-list@python.org>
List-Help: <mailto:python-announce-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-announce-list>, <mailto:python-announce-list-request@python.org?subject=subscribe>
X-Mailman-Original-Message-ID: <CAEeXt4PSgAGjFbj50=mUytatk5=0tu_UzhV6au+gvqCfWP_a7Q@mail.gmail.com>
Xref: csiph.com comp.lang.python.announce:2371

I've just release txAWS 0.2.3.1.  txAWS is a library for interacting with
Amazon Web Services (AWS) using Twisted.

AWSServiceEndpoint's ssl_hostname_verification's parameter now defaults to
True instead of False.  This affects all txAWS APIs which issue requests to
AWS endpoints.  For any application which uses the default
AWSServiceEndpoints, the server's TLS certificate will now be verified.

This resolves a security issue in which txAWS applications were vulnerable
to man-in-the-middle attacks which could either steal sensitive information
or, possibly, alter the AWS operation requested.

The new release is available on PyPI in source and wheel forms.  You can
also find txAWS at its new home on github, <https://github.com/twisted/txaws
>.

Special thanks to Least Authority Enterprises
(<https://leastauthority.com/>) for
sponsoring the work to find and fix this issue and to publish this new
release.

Jean-Paul