pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-27459US | critical9.8 | — | ||
pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` retu… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2026:10754ADVISORY
- https://access.redhat.com/errata/RHSA-2026:11856ADVISORY
- https://access.redhat.com/errata/RHSA-2026:11916ADVISORY
- https://access.redhat.com/errata/RHSA-2026:11996ADVISORY
- https://access.redhat.com/errata/RHSA-2026:13508ADVISORY
- https://access.redhat.com/errata/RHSA-2026:13512ADVISORY
- https://access.redhat.com/errata/RHSA-2026:13545ADVISORY
- https://access.redhat.com/errata/RHSA-2026:13553ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan