Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:04:46 +0000 CVE-2026-27459 — pyOpenSSL DTLS cookie callback buffer overflow https://vulnerability.circl.lu/vuln/cve-2026-27459 <p><strong>Affected:</strong> pyca pyopenssl, Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9, Red Hat Satellite 6.17 for RHEL 9, Red Hat Satellite 6.18 for RHEL 9, Red Hat RHUI 4 for RHEL 8, Red Hat Ansible Automation Platform 2.5 and 30 more</p> <p>pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.</p> <p><strong>Affected:</strong> pyca pyopenssl, Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9, Red Hat Satellite 6.17 for RHEL 9, Red Hat Satellite 6.18 for RHEL 9, Red Hat RHUI 4 for RHEL 8, Red Hat Ansible Automation Platform 2.5 and 30 more</p> <p>pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.</p> https://vulnerability.circl.lu/vuln/cve-2026-27459 GHSA-5pwr-322w-8jr4 — pyOpenSSL DTLS cookie callback buffer overflow https://vulnerability.circl.lu/vuln/ghsa-5pwr-322w-8jr4 <p><strong>Affected:</strong> PyPI: pyopenssl</p> <p>If a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer.</p> <p>Cookie values that are too long are now rejected.</p> <p><strong>Affected:</strong> PyPI: pyopenssl</p> <p>If a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer.</p> <p>Cookie values that are too long are now rejected.</p> https://vulnerability.circl.lu/vuln/ghsa-5pwr-322w-8jr4 PYSEC-2026-2269 https://vulnerability.circl.lu/vuln/pysec-2026-2269 <p><strong>Affected:</strong> PyPI: pyopenssl</p> <p>pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.</p> <p><strong>Affected:</strong> PyPI: pyopenssl</p> <p>pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.</p> https://vulnerability.circl.lu/vuln/pysec-2026-2269