https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T10:46:49.016684+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-27459 CVE-2026-27459 — pyOpenSSL DTLS cookie callback buffer overflow 2026-09-29T10:46:49.019308+00:00

Affected: pyca pyopenssl, Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9, Red Hat Satellite 6.17 for RHEL 9, Red Hat Satellite 6.18 for RHEL 9, Red Hat RHUI 4 for RHEL 8, Red Hat Ansible Automation Platform 2.5 and 30 more

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.

 https://vulnerability.circl.lu/vuln/ghsa-5pwr-322w-8jr4 GHSA-5pwr-322w-8jr4 — pyOpenSSL DTLS cookie callback buffer overflow 2026-09-29T10:46:49.019573+00:00

Affected: PyPI: pyopenssl

If a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer.

Cookie values that are too long are now rejected.

 https://vulnerability.circl.lu/vuln/pysec-2026-2269 PYSEC-2026-2269 2026-09-29T10:46:49.019623+00:00

Affected: PyPI: pyopenssl

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.