Fedora 43 rust-cryptoki Faces Critical pyOpenSSL Buffer Overflow Flaw
fedora
March 27, 2026
Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update...
Summary
Rust-native wrapper around the PKCS #11 API.
Update Information:
Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL.
Topics Covered
Change Log
* Mon Jan 26 2026 Jakub Jelen
References
[ 1 ] Bug #2433650 - python-cryptography-46.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2433650
[ 2 ] Bug #2447727 - pyOpenSSL-26.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2447727
[ 3 ] Bug #2448652 - CVE-2026-27459 pyOpenSSL: DTLS cookie callback buffer overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2448652
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d5b9f45ec' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: rust-cryptoki
Product: Fedora 43
Version: 0.12.0
Release: 2.fc43
Summary: Rust-native wrapper around the PKCS #11 API
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!