pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-openssl | Apr 27, 2026 | Mar 17, 2026 |
| Debian | — | Upgrade pyopenssl | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade python3.12-pyOpenSSLUpgrade automation-gateway-serverUpgrade automation-gateway-proxy-serverUpgrade automation-gateway-configUpgrade python3.12-pyjwtUpgrade python3.12-pysequoia-debuginfoUpgrade python3.12-django-ansible-baseUpgrade yamllintUpgrade automation-controllerUpgrade python3.12-pytokensUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade python3.12-django-ansible-base+authenticationUpgrade automation-platform-uiUpgrade python3.12-pytokens-debuginfoUpgrade python3-blackUpgrade automation-eda-controller-baseUpgrade python3.12-pytokens-debugsourceUpgrade python3.12-pyjwt+cryptoUpgrade python3.12-markdownUpgrade python3.12-blackUpgrade python3.12-django-ansible-base+feature_flagsUpgrade python3.12-cryptographyUpgrade automation-eda-controllerUpgrade python3.12-cffi-debugsourceUpgrade automation-gateway-proxy-debugsourceUpgrade python3.12-django-ansible-base+channel_authUpgrade python3.12-pulp-containerUpgrade python3.12-pyasn1-modulesUpgrade ansible-lintUpgrade receptor-debugsourceUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade python3.12-django-ansible-base+rest_filtersUpgrade python3.12-django-ansible-base+redis_clientUpgrade python3.12-cffiUpgrade automation-controller-venv-towerUpgrade automation-eda-controller-event-stream-servicesUpgrade python3.12-dynaconfUpgrade python3.12-pysequoiaUpgrade python3.12-galaxy-ngUpgrade automation-controller-cliUpgrade python3.12-pulpcoreUpgrade automation-gatewayUpgrade python3.12-pyasn1Upgrade python3-pathspecUpgrade python3-pytokensUpgrade automation-hubUpgrade python3.12-pysequoia-debugsourceUpgrade python3.12-pathspecUpgrade python3.12-django-ansible-base+rbacUpgrade automation-controller-serverUpgrade python3-pytokens-debuginfoUpgrade receptor-debuginfoUpgrade python3.12-django-ansible-base+resource_registryUpgrade python3.12-django-ansible-base+api_documentationUpgrade python3.12-galaxy-importerUpgrade python3.12-django-ansible-base+activitystreamUpgrade automation-gateway-proxy-server-debuginfoUpgrade ansible-coreUpgrade receptorUpgrade python-pytokens-debugsourceUpgrade python3.12-cryptography-debuginfoUpgrade python3.12-cryptography-debugsourceUpgrade receptorctlUpgrade python3.12-jwcryptoUpgrade automation-eda-controller-worker-servicesUpgrade automation-eda-controller-base-servicesUpgrade ansible-testUpgrade automation-controller-uiUpgrade python3.12-cffi-debuginfoUpgrade automation-gateway-proxyUpgrade python3-wheel-wheel | May 6, 2026 | Mar 17, 2026 |
| Ubuntu | — | Upgrade python3-openssl | Mar 24, 2026 | Mar 23, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 17, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub