Skip to content
OpenAdvisories
Medium ELSA-2026-50324 1 CVE

Moderate: pyOpenSSL security update (Oracle Linux 9)

Published Jun 24, 2026 · Updated Jun 24, 2026

Ecosystem: Oracle Linux

Summary

[19.0.0-1.0.3]
- Backport CVE-2026-27448 [Orabug: 39565553]

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 python3-pyOpenSSL 0:19.0.0-1.0.3.el9

Vulnerabilities 1

  • Low 1.7
    CVE-2026-27448

    pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

    pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. …

    pyca pyopenssl airflow-3 py3-cassandra-medusa Debian Ubuntu Azure Linux Alpine Wolfi PyPI