CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity due to NPN being not widely used and specifying an empty list likely being uncommon in-practice (typically a protocol name would be configured).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-setuptoolsUpgrade python39-numpy-docUpgrade python39-pybind11Upgrade python3-idleUpgrade python39-tomlUpgrade python39-testUpgrade python39-wheelUpgrade python39-pyUpgrade python3-develUpgrade python39-numpy-f2pyUpgrade python39-PyMySQLUpgrade python39-libsUpgrade python39-idleUpgrade python39-pluggyUpgrade python39-attrsUpgrade python39-requestsUpgrade python39-more-itertoolsUpgrade python39-psycopg2-testsUpgrade python39Upgrade python39-plyUpgrade python39-wheel-wheelUpgrade python39-debugUpgrade python39-cffiUpgrade python3-tkinterUpgrade python39-pipUpgrade python-unversioned-commandUpgrade python39-packagingUpgrade python39-develUpgrade python3-libsUpgrade python39-iniconfigUpgrade python39-pysocksUpgrade python39-mod_wsgiUpgrade python39-psutilUpgrade python39-cryptographyUpgrade python39-wcwidthUpgrade python39-urllib3Upgrade python39-sixUpgrade python39-pip-wheelUpgrade python39-idnaUpgrade python39-pycparserUpgrade python3-debugUpgrade python39-numpyUpgrade python3Upgrade python39-chardetUpgrade python3-testUpgrade python39-setuptools-wheelUpgrade python39-tkinterUpgrade python39-pyyamlUpgrade python39-pybind11-develUpgrade python39-CythonUpgrade python39-lxmlUpgrade python39-pytestUpgrade python39-pyparsingUpgrade python39-scipyUpgrade python39-psycopg2Upgrade python39-rpm-macrosUpgrade python39-psycopg2-doc | Dec 23, 2025 | Dec 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-develUpgrade tkinterUpgrade python3Upgrade python-testUpgrade python-debuginfoUpgrade python-libsUpgrade python3-testUpgrade python-toolsUpgrade python3-debugUpgrade python3-toolsUpgrade pythonUpgrade python3-develUpgrade python-debugUpgrade python3-debuginfoUpgrade python3-tkinterUpgrade python3-libs | Feb 5, 2025 | Jun 27, 2024 |
| Debian | — | Upgrade pypy3 | Mar 12, 2025 | Jun 27, 2024 |
| Dell Powerstore Dsa2025086 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Feb 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3Upgrade python3-fgoUpgrade python3-unversioned-command | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3Upgrade python3-unversioned-commandUpgrade python3-fgo | Mar 10, 2026 | Mar 10, 2026 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Oracle_linux | — | Upgrade python39-chardetUpgrade python39-packagingUpgrade python39-psycopg2-testsUpgrade python39-numpy-docUpgrade python39-urllib3Upgrade python39-attrsUpgrade python39-PyMySQLUpgrade python39-iniconfigUpgrade python39-numpy-f2pyUpgrade python39-cryptographyUpgrade python39-testUpgrade python39-pycparserUpgrade python39-more-itertoolsUpgrade python39-lxmlUpgrade python39-idleUpgrade python39-pybind11-develUpgrade python3-testUpgrade python39-requestsUpgrade python39-wcwidthUpgrade python39-wheelUpgrade python39-scipyUpgrade python39-numpyUpgrade python3Upgrade python-unversioned-commandUpgrade python39-psycopg2Upgrade python39Upgrade python39-pip-wheelUpgrade python39-pyyamlUpgrade python39-psycopg2-docUpgrade python39-pytestUpgrade python39-setuptools-wheelUpgrade python3-debugUpgrade python39-libsUpgrade python39-rpm-macrosUpgrade python39-setuptoolsUpgrade python39-pyUpgrade python39-psutilUpgrade python39-idnaUpgrade python39-develUpgrade python39-tomlUpgrade python39-CythonUpgrade python39-debugUpgrade python3-develUpgrade python39-wheel-wheelUpgrade python39-plyUpgrade python39-pysocksUpgrade python39-sixUpgrade python39-pluggyUpgrade python3-libsUpgrade python39-cffiUpgrade python39-pipUpgrade python39-tkinterUpgrade python39-pyparsingUpgrade python39-pybind11Upgrade python3-idleUpgrade python3-tkinterUpgrade python39-mod_wsgi | Dec 22, 2025 | Jun 27, 2024 |
| Redhat_linux | — | Upgrade python3Upgrade python39-packagingUpgrade python3-libsUpgrade python39-cryptographyUpgrade python39-sixUpgrade python-cryptography-debugsourceUpgrade python-psycopg2-debugsourceUpgrade python39-debuginfoUpgrade python39-lxmlUpgrade python39-CythonUpgrade python39-lxml-debuginfoUpgrade python39-PyMySQLUpgrade python39-debugsourceUpgrade scipy-debugsourceUpgrade python39-pycparserUpgrade Cython-debugsourceUpgrade python39-libsUpgrade python39-numpyUpgrade python39-more-itertoolsUpgrade python39-cffi-debuginfoUpgrade python-lxml-debugsourceUpgrade python39-chardetUpgrade python39-wheelUpgrade python39-scipyUpgrade python39-pybind11-develUpgrade python39-urllib3Upgrade python39-psycopg2-testsUpgrade python39-setuptools-wheelUpgrade python3.9-debuginfoUpgrade python-unversioned-commandUpgrade python39-develUpgrade python39-idnaUpgrade python39-iniconfigUpgrade python39-pluggyUpgrade python39-pybind11Upgrade python3-idleUpgrade python39-pyUpgrade python39-numpy-f2pyUpgrade python39-psycopg2-docUpgrade python39-idleUpgrade python39Upgrade python39-wcwidthNo solution existsUpgrade python3-develUpgrade python39-pyyamlUpgrade python39-mod_wsgiUpgrade python39-psycopg2Upgrade python39-psutil-debuginfoUpgrade python39-pipUpgrade python-cffi-debugsourceUpgrade python3.9-debugsourceUpgrade python39-rpm-macrosUpgrade python39-psutilUpgrade python39-plyUpgrade python39-numpy-docUpgrade python39-cffiUpgrade python39-cryptography-debuginfoUpgrade python39-psycopg2-debuginfoUpgrade python39-wheel-wheelUpgrade numpy-debugsourceUpgrade python39-testUpgrade python39-setuptoolsUpgrade python39-requestsUpgrade python3-testUpgrade python39-numpy-debuginfoUpgrade python39-tomlUpgrade python39-pytestUpgrade python39-attrsUpgrade python39-pyparsingUpgrade python3-debugUpgrade python-psutil-debugsourceUpgrade PyYAML-debugsourceUpgrade python39-Cython-debuginfoUpgrade python39-scipy-debuginfoUpgrade python39-tkinterUpgrade python39-pip-wheelUpgrade python39-pyyaml-debuginfoUpgrade python39-debugUpgrade python3-tkinterUpgrade python39-pysocks | Jul 9, 2025 | Jun 27, 2024 |
| Rocky_linux | — | Upgrade python39-develUpgrade python39-debugUpgrade python3Upgrade python39-psycopg2-testsUpgrade python-lxml-debugsourceUpgrade python39-tkinterUpgrade python3-libsUpgrade python39-pybind11Upgrade python39-testUpgrade python39-psutil-debuginfoUpgrade python39-scipyUpgrade python3.9-debugsourceUpgrade python39-scipy-debuginfoUpgrade python3.9-debuginfoUpgrade python-cryptography-debugsourceUpgrade python39-lxmlUpgrade PyYAML-debugsourceUpgrade python39-CythonUpgrade python39-numpyUpgrade python39-cffi-debuginfoUpgrade python-cffi-debugsourceUpgrade python39-psycopg2-docUpgrade python39-libsUpgrade python39-pyyaml-debuginfoUpgrade python39-debuginfoUpgrade python39-numpy-f2pyUpgrade python39-cryptography-debuginfoUpgrade python39-cffiUpgrade python3-tkinterUpgrade python39-debugsourceUpgrade python39-cryptographyUpgrade python39-psycopg2-debuginfoUpgrade python-psycopg2-debugsourceUpgrade numpy-debugsourceUpgrade python39-lxml-debuginfoUpgrade python39-psycopg2Upgrade scipy-debugsourceUpgrade python39-mod_wsgiUpgrade python39-idleUpgrade python3-idleUpgrade python3-debugUpgrade python39Upgrade python39-pyyamlUpgrade python39-pybind11-develUpgrade python3-develUpgrade python39-numpy-debuginfoUpgrade Cython-debugsourceUpgrade python39-Cython-debuginfoUpgrade python-psutil-debugsourceUpgrade python3-testUpgrade python39-psutil | Feb 5, 2026 | Dec 18, 2025 |
| Suse | — | Upgrade python39-cursesUpgrade python39-toolsUpgrade python36-develUpgrade python39-docUpgrade python39-baseUpgrade libpython3_9-1_0Upgrade python39-base-32bitUpgrade python3-toolsUpgrade python36Upgrade python39-doc-devhelpUpgrade python3-cursesUpgrade python3-doc-devhelpUpgrade libpython3_6m1_0Upgrade python3-docUpgrade python3-dbmUpgrade python36-baseUpgrade python39-develUpgrade python3-testsuiteUpgrade python39-idleUpgrade python39-testsuiteUpgrade python3-idleUpgrade libpython3_6m1_0-32bitUpgrade python3-baseUpgrade python39-dbmUpgrade libpython3_9-1_0-32bitUpgrade python39Upgrade python3Upgrade python3-develUpgrade python39-32bitUpgrade python3-tkUpgrade python39-tk | Sep 3, 2024 | Jun 27, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 27, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub