SUSE-SU-2026:20954-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2026/suse-su-202620954-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20954-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2026:20954-1

Upstream

CVE-2026-27448

CVE-2026-27459

Related

Published

2026-04-01T09:35:43Z

Modified

2026-04-08T18:24:41.090020Z

Summary

Security update for python-pyOpenSSL

Details

This update for python-pyOpenSSL fixes the following issues:

CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).
CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).

References

Affected packages

SUSE:Linux Micro 6.1 / python-pyOpenSSL

Package

Name: python-pyOpenSSL
Purl: pkg:rpm/suse/python-pyOpenSSL&distro=SUSE%20Linux%20Micro%206.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.0.0-slfo.1.1_2.1

Ecosystem specific

{
    "binaries": [
        {
            "python311-pyOpenSSL": "24.0.0-slfo.1.1_2.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20954-1.json"