Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 6 articles for you...
217
security advisorymoderatethreatOracle Linux 9 pyOpenSSL Moderate Threat Advisory ELSA-2026-50324
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-50324 http://linux.oracle.com/errata/ELSA-2026-50324.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: python3-pyOpenSSL-19.0.0-1.0.3.el9.noarch.rpm aarch64: python3-pyOpenSSL-19.0.0-1.0.3.el9.noarch.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/pyOpenSSL-19.0.0-1.0.3.el9.src.rpm Related CVEs: CVE-2026-27448 Description of changes: [19.0.0-1.0.3] - Backport CVE-2026-27448 [Orabug: 39565553] _______________________________________________ El-errata mailing list
Jun 24, 2026
•moderate
Oracle
100
security advisorydenial of servicebuffer overflowopenSUSE Multi-Linux Manager Important Denial of Service Patch 2026-2244-1
An update that solves three vulnerabilities, contains one feature and has six security fixes can now be installed.. # Security update 5.0.8 for Multi-Linux Manager Salt Bundle Announcement ID: SUSE-SU-2026:2244-1 Release Date: 2026-06-03T14:11:48Z Rating: important References: * bsc#1254629 * bsc#1254900 * bsc#1257583 * bsc#1257831 * bsc#1258957 * bsc#1259554 * bsc#1259700 * bsc#1259804 * bsc#1259808 * jsc#MSQA-1052 Cross-References: * CVE-2026-27448 * CVE-2026-27459 * CVE-2026-31958 CVSS scores: * CVE-2026-27448 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-27448 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-27448 ( NVD ): 1.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27448 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31958 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31958 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31958 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-31958 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSELeap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 * SUSE Linux Enterprise Desktop 15 SP1 * SUSE Linux Enterprise Desktop 15 SP2 * SUSE Linux Enterprise Desktop 15 SP3 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.0 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP1 * SUSE Linux Enterprise Real Time 15 SP2 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE ManagerClient Tools for SLE 15 * SUSE Manager Client Tools for SLE Micro 5 An update that solves three vulnerabilities, contains one feature and has six security fixes can now be installed. ## Description: This update fixes the following issues: venv-salt-minion: * Security issues fixed: * CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service (bsc#1259554) * CVE-2026-27459: pyOpenSSL: Fixed issue with large cookie value that can lead to a buffer overflow (bsc#1259808) * CVE-2026-27448: pyOpenSSL: Fixed unhandled exception can result in connection not being cancelled (bsc#1259804) * Other updates and bugfixes: * Use non vendored Tornado with Python 3.11 (bsc#1257583, bsc#1259700) * Hardened Tornado from invalid HTTP reason phrases * Read full URI from ldap pillar config (bsc#1254900) * Make users with backslash work for `salt-ssh` (bsc#1254629). * Fixed `ansible.playbooks` `extra-vars` quoting (bsc#1257831), * Fixed `virtualenv` call in test helper to use proper Python version. * Fixed the issue preventing SELinux profile to be loaded on SLES 16 deployed using cloud images (bsc#1258957) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Client Tools for SLE Micro 5 zypper in -t patch SUSE-SLE-Manager-Tools-For-Micro-5-2026-2244=1 * SUSE Manager Client Tools for SLE 15 zypper in -t patch SUSE-SLE-Manager-Tools-15-2026-2244=1 ## Package List: * SUSE Manager Client Tools for SLE Micro 5 (aarch64 s390x x86_64) * venv-salt-minion-3006.0-150000.3.95.1 * SUSE Manager Client Tools for SLE 15 (aarch64 ppc64le s390x x86_64) * venv-salt-minion-3006.0-150000.3.95.1 ## References: * https://www.suse.com/security/cve/CVE-2026-27448.html *https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-31958.html * https://bugzilla.suse.com/show_bug.cgi?id=1254629 * https://bugzilla.suse.com/show_bug.cgi?id=1254900 * https://bugzilla.suse.com/show_bug.cgi?id=1257583 * https://bugzilla.suse.com/show_bug.cgi?id=1257831 * https://bugzilla.suse.com/show_bug.cgi?id=1258957 * https://bugzilla.suse.com/show_bug.cgi?id=1259554 * https://bugzilla.suse.com/show_bug.cgi?id=1259700 * https://bugzilla.suse.com/show_bug.cgi?id=1259804 * https://bugzilla.suse.com/show_bug.cgi?id=1259808 * https://jira.suse.com/browse/MSQA-1052 . High priority security update for Multi-Linux Manager Salt Bundle addresses multiple vulnerabilities on openSUSE.. Multi-Linux Manager Salt Bundle update, SUSE security patch, openSUSE vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Jun 03, 2026
•Important
SuSE
89
security advisoryfedorabuffer overflowFedora 44 pyOpenSSL Important X509Name Field Fix CVE-2026-40475
Update to pyOpenSSL 26.1.0 This update adds support for cryptography v47 and fixes a single security issue: Fixed X509Name field setters to correctly pass the value length to OpenSSL. Previously, values containing NUL bytes would be silently truncated, causing a divergence between the stored ASN.1 value and the value visible from Python.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-05d463c932 2026-05-06 00:48:51.045817+00:00 -------------------------------------------------------------------------------- Name : pyOpenSSL Product : Fedora 44 Version : 26.1.0 Release : 1.fc44 URL : https://pyopenssl.readthedocs.org/ Summary : Python wrapper module around the OpenSSL library Description : High-level wrapper around a subset of the OpenSSL library, includes among others * SSL.Connection objects, wrapping the methods of Python's portable sockets * Callbacks written in Python * Extensive error-handling mechanism, mirroring OpenSSL's error codes -------------------------------------------------------------------------------- Update Information: Update to pyOpenSSL 26.1.0 This update adds support for cryptography v47 and fixes a single security issue: Fixed X509Name field setters to correctly pass the value length to OpenSSL. Previously, values containing NUL bytes would be silently truncated, causing a divergence between the stored ASN.1 value and the value visible from Python. Credit to BudongJW for reporting the issue. CVE-2026-40475 -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 29 2026 Jeremy Cline - 26.1.0-1 - Update to 26.1.0 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-05d463c932' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
May 06, 2026
•Important
Fedora
89
security advisoryfedorabuffer overflowFedora 44 pyOpenSSL Important Buffer Overflow Fix CVE-2026-27459
Update to version 26.0.0 Added support for using aws-lc instead of OpenSSL. Properly raise an error if a DTLS cookie callback returned a cookie longer than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a buffer-overflow. Credit to dark_haxor for reporting the issue.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-5697f4e025 2026-03-31 00:16:35.926004+00:00 -------------------------------------------------------------------------------- Name : pyOpenSSL Product : Fedora 44 Version : 26.0.0 Release : 1.fc44 URL : https://www.pyopenssl.org/en/latest/ Summary : Python wrapper module around the OpenSSL library Description : High-level wrapper around a subset of the OpenSSL library, includes among others * SSL.Connection objects, wrapping the methods of Python's portable sockets * Callbacks written in Python * Extensive error-handling mechanism, mirroring OpenSSL's error codes -------------------------------------------------------------------------------- Update Information: Update to version 26.0.0 Added support for using aws-lc instead of OpenSSL. Properly raise an error if a DTLS cookie callback returned a cookie longer than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a buffer-overflow. Credit to dark_haxor for reporting the issue. CVE-2026-27459 Added OpenSSL.SSL.Connection.get_group_name to determine which group name was negotiated. Context.set_tlsext_servername_callback now handles exceptions raised in the callback by calling sys.excepthook and returning a fatal TLS alert. Previously, exceptions were silently swallowed and the handshake would proceed as if the callback had succeeded. Credit to Leury Castillo for reporting this issue. CVE-2026-27448 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 18 2026 Jeremy Cline - 26.0.0-1 - Update to v26.0.0 - Addedsupport for using aws-lc instead of OpenSSL. - Properly raise an error if a DTLS cookie callback returned a cookie longer than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a buffer-overflow. Credit to dark_haxor for reporting the issue. CVE-2026-27459 - Added OpenSSL.SSL.Connection.get_group_name to determine which group name was negotiated. - Context.set_tlsext_servername_callback now handles exceptions raised in the callback by calling sys.excepthook and returning a fatal TLS alert. Previously, exceptions were silently swallowed and the handshake would proceed as if the callback had succeeded. Credit to Leury Castillo for reporting this issue. CVE-2026-27448 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2448652 - CVE-2026-27459 pyOpenSSL: DTLS cookie callback buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2448652 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-5697f4e025' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 31, 2026
•Important
Fedora
89
security advisorysecurity updatefedoraFedora 43 Releases pyOpenSSL Critical Buffer Overflow Patch Update
Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9d5b9f45ec 2026-03-27 01:16:52.247652+00:00 -------------------------------------------------------------------------------- Name : rust-wycheproof Product : Fedora 43 Version : 0.6.0 Release : 1.fc43 URL : https://crates.io/crates/wycheproof Summary : Wycheproof test vectors Description : Wycheproof test vectors. -------------------------------------------------------------------------------- Update Information: Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL. -------------------------------------------------------------------------------- ChangeLog: * Mon Jan 26 2026 Jakub Jelen - 0.6.0-1 - First Fedora release (#2432331) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2433650 - python-cryptography-46.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2433650 [ 2 ] Bug #2447727 - pyOpenSSL-26.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2447727 [ 3 ] Bug #2448652 - CVE-2026-27459 pyOpenSSL: DTLS cookie callback buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2448652 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2026-9d5b9f45ec' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 27, 2026
•Critical
Fedora
89
security advisoryfedorabuffer overflowFedora 43 rust-asn1 Major Memory Leak Flaw 2026-bc1a5g4j2k
Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9d5b9f45ec 2026-03-27 01:16:52.247652+00:00 -------------------------------------------------------------------------------- Name : rust-asn1 Product : Fedora 43 Version : 0.22.0 Release : 1.fc43 URL : https://crates.io/crates/asn1 Summary : ASN.1 (DER) parser and writer for Rust Description : ASN.1 (DER) parser and writer for Rust. -------------------------------------------------------------------------------- Update Information: Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL. -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 22 2026 Jeremy Cline - 0.22.0-1 - Update to v0.22.0 * Sat Jan 17 2026 Fedora Release Engineering - 0.21.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2433650 - python-cryptography-46.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2433650 [ 2 ] Bug #2447727 - pyOpenSSL-26.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2447727 [ 3 ] Bug #2448652 - CVE-2026-27459 pyOpenSSL: DTLS cookie callback buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2448652 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d5b9f45ec' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 27, 2026
•Important
Fedora
89
security advisoryfedorabuffer overflowFedora 43 rust-asn1_derive Important Update for pyOpenSSL CVE-2026-27459
Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9d5b9f45ec 2026-03-27 01:16:52.247652+00:00 -------------------------------------------------------------------------------- Name : rust-asn1_derive Product : Fedora 43 Version : 0.22.0 Release : 1.fc43 URL : https://crates.io/crates/asn1_derive Summary : #[derive] support for asn1 Description : -------------------------------------------------------------------------------- Update Information: Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL. -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 22 2026 Jeremy Cline - 0.22.0-1 - Update to v0.22.0 * Sat Jan 17 2026 Fedora Release Engineering - 0.21.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2433650 - python-cryptography-46.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2433650 [ 2 ] Bug #2447727 - pyOpenSSL-26.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2447727 [ 3 ] Bug #2448652 - CVE-2026-27459 pyOpenSSL: DTLS cookie callback buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2448652 -------------------------------------------------------------------------------- Thisupdate can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d5b9f45ec' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 27, 2026
•Important
Fedora
89
security advisoryfedorabuffer overflowFedora 43 releases openssl-crypto-sys addressing PyCrypto buffer overflow
Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9d5b9f45ec 2026-03-27 01:16:52.247652+00:00 -------------------------------------------------------------------------------- Name : rust-cryptoki-sys Product : Fedora 43 Version : 0.5.0 Release : 2.fc43 URL : https://crates.io/crates/cryptoki-sys Summary : FFI wrapper around the PKCS #11 API Description : FFI wrapper around the PKCS #11 API. -------------------------------------------------------------------------------- Update Information: Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL. -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 17 2026 Fedora Release Engineering - 0.5.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Wed Jan 7 2026 Jakub Jelen - 0.5.0-1 - cryptoki-sys-0.5.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2433650 - python-cryptography-46.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2433650 [ 2 ] Bug #2447727 - pyOpenSSL-26.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2447727 [ 3 ] Bug #2448652 - CVE-2026-27459 pyOpenSSL: DTLS cookie callback buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2448652 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d5b9f45ec' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 27, 2026
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!