Back Linuxsecurity

CentOS 8 python-encryption Low Memory Leak Issue 2026

Linuxsecurity •LinuxSecurity Advisories • March 27, 2026

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Update Information : Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL.

cryptography is a package designed to expose cryptographic primitives and

recipes to Python developers.

Update pyOpenSSL to v26.0.0 (security update) Update python-cryptography to v46.0.5 (dependency of pyOpenSSL 26) Update rust-asn1 to 0.22 (dependency of python-cryptography) Update kryoptic to v1.5 (required for rust-asn1 bump to 0.22) The security status of this update is only for pyOpenSSL.

* Tue Feb 10 2026 Jeremy Cline - 46.0.5-1 - Update to v46.0.5 * Thu Jan 22 2026 Jeremy Cline - 46.0.3-1 - Update to v46.0.3 - Removed the deprecated get_attribute_for_oid method on CertificateSigningRequest. Users should use get_attribute_for_oid() instead. - Removed the deprecated CAST5, SEED, IDEA, and Blowfish classes from the cipher module. These are still available in Decrepit cryptography. - In X.509, when performing a PSS signature with a SHA-3 hash, it is now encoded with the official NIST SHA3 OID. - Added support for free-threaded Python 3.14. * Sat Jan 17 2026 Fedora Release Engineering - 45.0.4-6 - Rebuilt for * Wed Oct 22 2025 Peter Robinson - 45.0.4-5 - Drop pytz test req, only needed for py < 3.9

[ 1 ] Bug #2433650 - python-cryptography-46.0.5 is available [ 2 ] Bug #2447727 - pyOpenSSL-26.0.0 is available [ 3 ] Bug #2448652 - CVE-2026-27459 pyOpenSSL: DTLS cookie callback buffer overflow [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d5b9f45ec' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Buffer Overflow Vulnerability in pyOpenSSL Requires Immediate Action A critical buffer overflow vulnerability (CVE-2026-27459) in pyOpenSSL was published on March 17, 2026. This vulnerability affects systems using pyOpenSSL and is linked to a DTLS cookie callback buffer overflow. The updates released include pyOpenSSL version 26.0.0 and python-cryptography version 46.0.5, which are essential for mitigating this threat. The updates also involve dependencies like rust-asn1 and kryoptic. Users are advised to upgrade their systems using the 'dnf' update program to ensure protection against potential exploits. The security status of this update is particularly focused on the pyOpenSSL package. Failure to apply these updates may leave systems vulnerable to attacks that exploit this buffer overflow. The updates are available for immediate installation. 3 sources 76

Extracted Entities

CVEs (1)

CVE-2026-27459