CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity due to NPN being not widely used and specifying an empty list likely being uncommon in-practice (typically a protocol name would be configured).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-setuptoolsUpgrade python39-pluggyUpgrade python39-cffiUpgrade python3-idleUpgrade python39-libsUpgrade python39-PyMySQLUpgrade python39-pyUpgrade python-unversioned-commandUpgrade python39-wheelUpgrade python3-tkinterUpgrade python39-debugUpgrade python39-pipUpgrade python39-more-itertoolsUpgrade python39-attrsUpgrade python39-pysocksUpgrade python39-pybind11Upgrade python39-develUpgrade python39-iniconfigUpgrade python39-psycopg2-testsUpgrade python3-develUpgrade python39-numpy-f2pyUpgrade python3-libsUpgrade python39-packagingUpgrade python39-plyUpgrade python39-tomlUpgrade python39-wheel-wheelUpgrade python39-idleUpgrade python39-testUpgrade python39-requestsUpgrade python39Upgrade python39-numpy-docUpgrade python39-pyparsingUpgrade python3-testUpgrade python39-pycparserUpgrade python3-debugUpgrade python39-setuptools-wheelUpgrade python39-psycopg2-docUpgrade python39-chardetUpgrade python39-idnaUpgrade python39-wcwidthUpgrade python39-mod_wsgiUpgrade python39-pip-wheelUpgrade python39-CythonUpgrade python3Upgrade python39-lxmlUpgrade python39-pybind11-develUpgrade python39-psycopg2Upgrade python39-pyyamlUpgrade python39-numpyUpgrade python39-scipyUpgrade python39-sixUpgrade python39-rpm-macrosUpgrade python39-urllib3Upgrade python39-tkinterUpgrade python39-pytestUpgrade python39-psutilUpgrade python39-cryptography | Dec 23, 2025 | Dec 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python3-libsUpgrade python-debugUpgrade python3-debuginfoUpgrade pythonUpgrade python3-develUpgrade python3-tkinterUpgrade python-develUpgrade tkinterUpgrade python3Upgrade python3-testUpgrade python-libsUpgrade python3-debugUpgrade python-testUpgrade python3-toolsUpgrade python-toolsUpgrade python-debuginfo | Feb 5, 2025 | Jun 27, 2024 |
| Debian | — | Upgrade pypy3 | Mar 12, 2025 | Jun 27, 2024 |
| Dell Powerstore Dsa2025086 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Feb 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-unversioned-commandUpgrade python3-fgoUpgrade python3 | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3Upgrade python3-unversioned-commandUpgrade python3-fgo | Mar 10, 2026 | Mar 10, 2026 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Oracle_linux | — | Upgrade python-unversioned-commandUpgrade python39-numpyUpgrade python39-psycopg2-testsUpgrade python3Upgrade python39-pyyamlUpgrade python39-pybind11-develUpgrade python39-wcwidthUpgrade python39-attrsUpgrade python39-iniconfigUpgrade python39-PyMySQLUpgrade python39-testUpgrade python39-numpy-docUpgrade python39-requestsUpgrade python39-lxmlUpgrade python39-debugUpgrade python3-debugUpgrade python39-tomlUpgrade python39-develUpgrade python39-CythonUpgrade python3-idleUpgrade python39-pytestUpgrade python39-pyUpgrade python39-libsUpgrade python3-develUpgrade python3-tkinterUpgrade python39-wheel-wheelUpgrade python39-pysocksUpgrade python39-sixUpgrade python39-plyUpgrade python39-pybind11Upgrade python39-cffiUpgrade python39-pyparsingUpgrade python39-pipUpgrade python39-tkinterUpgrade python3-libsUpgrade python39-pluggyUpgrade python39-mod_wsgiUpgrade python39-setuptools-wheelUpgrade python39-setuptoolsUpgrade python39-idnaUpgrade python39-psutilUpgrade python39-rpm-macrosUpgrade python39-psycopg2-docUpgrade python39-urllib3Upgrade python39-pip-wheelUpgrade python39-packagingUpgrade python39-numpy-f2pyUpgrade python3-testUpgrade python39-chardetUpgrade python39-wheelUpgrade python39-idleUpgrade python39-pycparserUpgrade python39-more-itertoolsUpgrade python39-scipyUpgrade python39-cryptographyUpgrade python39Upgrade python39-psycopg2 | Dec 22, 2025 | Jun 27, 2024 |
| Redhat_linux | — | Upgrade python39-debugsourceUpgrade python3-idleUpgrade python39Upgrade python39-pybind11-develUpgrade python39-idnaUpgrade python39-wcwidthNo solution existsUpgrade python3-develUpgrade python39-pyyamlUpgrade python39-packagingUpgrade python39-psycopg2-testsUpgrade python39-scipyUpgrade python39-setuptools-wheelUpgrade python39-urllib3Upgrade python39-pycparserUpgrade python-psycopg2-debugsourceUpgrade python39-chardetUpgrade python39-pybind11Upgrade python39-idleUpgrade python39-cryptographyUpgrade python3.9-debuginfoUpgrade python39-more-itertoolsUpgrade python39-cffi-debuginfoUpgrade python39-numpyUpgrade python39-libsUpgrade python-cryptography-debugsourceUpgrade python39-debuginfoUpgrade python39-CythonUpgrade python39-PyMySQLUpgrade python39-lxml-debuginfoUpgrade scipy-debugsourceUpgrade python39-sixUpgrade python39-numpy-f2pyUpgrade python39-wheelUpgrade python-unversioned-commandUpgrade python-lxml-debugsourceUpgrade python39-develUpgrade python39-psycopg2-docUpgrade python39-pyUpgrade python39-lxmlUpgrade Cython-debugsourceUpgrade python3Upgrade python3-libsUpgrade python39-pluggyUpgrade python39-iniconfigUpgrade python39-Cython-debuginfoUpgrade python39-psycopg2Upgrade python39-psutil-debuginfoUpgrade python39-tkinterUpgrade python39-pip-wheelUpgrade python39-debugUpgrade python3-tkinterUpgrade python39-plyUpgrade python39-numpy-docUpgrade python39-psutilUpgrade python39-scipy-debuginfoUpgrade python-psutil-debugsourceUpgrade python39-tomlUpgrade python3-debugUpgrade python39-pyparsingUpgrade python39-pysocksUpgrade python-cffi-debugsourceUpgrade python39-rpm-macrosUpgrade python39-mod_wsgiUpgrade python39-pipUpgrade python39-pytestUpgrade python39-psycopg2-debuginfoUpgrade python39-attrsUpgrade python39-setuptoolsUpgrade python39-wheel-wheelUpgrade python3-testUpgrade python39-testUpgrade python39-requestsUpgrade python39-numpy-debuginfoUpgrade python3.9-debugsourceUpgrade python39-pyyaml-debuginfoUpgrade python39-cffiUpgrade PyYAML-debugsourceUpgrade python39-cryptography-debuginfoUpgrade numpy-debugsource | Jul 9, 2025 | Jun 27, 2024 |
| Rocky_linux | — | Upgrade scipy-debugsourceUpgrade python39-cryptography-debuginfoUpgrade python39-cffiUpgrade python-psycopg2-debugsourceUpgrade python39-mod_wsgiUpgrade numpy-debugsourceUpgrade python39-psycopg2Upgrade python39-cryptographyUpgrade python39-debugsourceUpgrade python39-idleUpgrade Cython-debugsourceUpgrade python39-Cython-debuginfoUpgrade python3-testUpgrade python-psutil-debugsourceUpgrade python3-debugUpgrade python3-idleUpgrade python39-lxml-debuginfoUpgrade python3-develUpgrade python39-pybind11-develUpgrade python39Upgrade python39-pyyamlUpgrade python39-psycopg2-debuginfoUpgrade python39-numpy-debuginfoUpgrade python39-psutilUpgrade python3-tkinterUpgrade PyYAML-debugsourceUpgrade python39-numpyUpgrade python3.9-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python39-libsUpgrade python39-scipy-debuginfoUpgrade python39-pybind11Upgrade python3-libsUpgrade python39-testUpgrade python3.9-debugsourceUpgrade python39-scipyUpgrade python39-psutil-debuginfoUpgrade python39-debugUpgrade python39-develUpgrade python39-psycopg2-docUpgrade python-cffi-debugsourceUpgrade python-cryptography-debugsourceUpgrade python39-tkinterUpgrade python39-lxmlUpgrade python3Upgrade python-lxml-debugsourceUpgrade python39-psycopg2-testsUpgrade python39-numpy-f2pyUpgrade python39-CythonUpgrade python39-cffi-debuginfoUpgrade python39-debuginfo | Feb 5, 2026 | Dec 18, 2025 |
| Suse | — | Upgrade python3-dbmUpgrade libpython3_9-1_0Upgrade python39-develUpgrade python3-docUpgrade libpython3_6m1_0Upgrade python39-docUpgrade python3-testsuiteUpgrade python36-develUpgrade python39-base-32bitUpgrade python36Upgrade python3-toolsUpgrade python39-cursesUpgrade python3-doc-devhelpUpgrade python39-doc-devhelpUpgrade python39-toolsUpgrade python3-cursesUpgrade python36-baseUpgrade python39-baseUpgrade libpython3_6m1_0-32bitUpgrade python3Upgrade python3-develUpgrade python39Upgrade python39-dbmUpgrade libpython3_9-1_0-32bitUpgrade python39-tkUpgrade python3-idleUpgrade python39-32bitUpgrade python3-tkUpgrade python39-testsuiteUpgrade python39-idleUpgrade python3-base | Sep 3, 2024 | Jun 27, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 27, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub