The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-openssl | Apr 27, 2026 | Mar 17, 2026 |
| Debian | — | Upgrade pyopenssl | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade python3.12-django-ansible-base+redis_clientUpgrade automation-eda-controllerUpgrade python3.12-cffi-debugsourceUpgrade python3.12-pyjwt+cryptoUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade python3.12-django-ansible-baseUpgrade receptor-debugsourceUpgrade python3.12-pyOpenSSLUpgrade automation-gateway-serverUpgrade automation-platform-uiUpgrade python3.12-cryptographyUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade yamllintUpgrade automation-controllerUpgrade python3.12-django-ansible-base+rest_filtersUpgrade python3.12-django-ansible-base+channel_authUpgrade python3.12-pulp-containerUpgrade python3.12-markdownUpgrade automation-gateway-proxy-debugsourceUpgrade python3.12-blackUpgrade python3.12-pyasn1-modulesUpgrade automation-gateway-proxy-serverUpgrade python3-blackUpgrade python3.12-django-ansible-base+authenticationUpgrade automation-gateway-configUpgrade python3.12-pyjwtUpgrade automation-eda-controller-baseUpgrade python3.12-pytokens-debuginfoUpgrade python3.12-pytokens-debugsourceUpgrade python3.12-pysequoia-debuginfoUpgrade python3.12-pytokensUpgrade ansible-lintUpgrade python3.12-django-ansible-base+feature_flagsUpgrade python3.12-jwcryptoUpgrade python3.12-pysequoiaUpgrade python3.12-dynaconfUpgrade automation-eda-controller-event-stream-servicesUpgrade python3.12-django-ansible-base+rbacUpgrade python3.12-django-ansible-base+resource_registryUpgrade python3-pathspecUpgrade receptor-debuginfoUpgrade automation-eda-controller-worker-servicesUpgrade receptorctlUpgrade automation-hubUpgrade ansible-testUpgrade python3.12-cryptography-debugsourceUpgrade python3.12-cryptography-debuginfoUpgrade python3-pytokensUpgrade python3.12-pulpcoreUpgrade python3.12-cffi-debuginfoUpgrade automation-gatewayUpgrade automation-controller-cliUpgrade python3-wheel-wheelUpgrade automation-gateway-proxyUpgrade ansible-coreUpgrade python3.12-django-ansible-base+api_documentationUpgrade automation-gateway-proxy-server-debuginfoUpgrade python3.12-django-ansible-base+activitystreamUpgrade python3.12-galaxy-importerUpgrade receptorUpgrade python3-pytokens-debuginfoUpgrade python-pytokens-debugsourceUpgrade automation-controller-serverUpgrade python3.12-pyasn1Upgrade automation-controller-venv-towerUpgrade python3.12-galaxy-ngUpgrade automation-eda-controller-base-servicesUpgrade python3.12-pathspecUpgrade python3.12-pysequoia-debugsourceUpgrade automation-controller-uiUpgrade python3.12-cffi | May 6, 2026 | Mar 17, 2026 |
| Ubuntu | — | Upgrade python3-openssl | Mar 24, 2026 | Mar 23, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 17, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub