Advisories » MGASA-2026-0074

Updated python-openssl packages fix security vulnerabilities

Publication date: 31 Mar 2026
Modification date: 31 Mar 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-27448 , CVE-2026-27459

Description

pyOpenSSL allows TLS connection bypass via unhandled callback exception
in set_tlsext_servername_callback. (CVE-2026-27448)
pyOpenSSL DTLS cookie callback buffer overflow. (CVE-2026-27459)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35254
• https://www.openwall.com/lists/oss-security/2026/03/20/5
• https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4
• https://github.com/pyca/pyopenssl/security/advisories/GHSA-vp96-hxj8-p424
• https://ubuntu.com/security/notices/USN-8115-1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27448
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27459

SRPMS

9/core

• python-openssl-23.0.0-1.1.mga9