AZL-111101

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111101.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-111101

Upstream

CVE-2026-115557

Published

2026-10-24T15:17:33Z

Modified

2026-10-25T14:16:04Z

Summary

CVE-2026-115557 affecting package python3 3.12.14-2

Details

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-115557

Affected packages

Azure Linux:3 / python3

Package

Name: python3
Purl: pkg:rpm/azure-linux/python3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

3.12.14-2

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111101.json"