AZL-111098

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111098.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-111098

Upstream

CVE-2026-115557

Published

2026-10-24T15:17:33Z

Modified

2026-10-25T14:16:04Z

Summary

CVE-2026-115557 affecting package python-py 1.11.0-1

Details

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-115557

Affected packages

Azure Linux:3 / python-py

Package

Name: python-py
Purl: pkg:rpm/azure-linux/python-py

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.11.0-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111098.json"