SUSE-SU-2026:1192-1

Опубликовано: 07 апр. 2026

Источник: suse-cvrf

Описание

Security update for python-pyOpenSSL

This update for python-pyOpenSSL fixes the following issues:

CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).
CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).

Список пакетов

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest

python311-pyOpenSSL-23.2.0-150400.3.13.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-CHOST-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-CHOST-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-CHOST-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-HPC-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-HPC-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-HPC-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-HPC-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-Hardened-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-Hardened-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-Hardened-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP-Hardened

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP-Hardened-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP-Hardened-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAPCAL

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAPCAL-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-SAPCAL-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Azure-3P

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Azure-Basic

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Azure-Standard

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-CHOST-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-CHOST-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-CHOST-BYOS-GDC

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-HPC-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-HPC-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-HPC-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Hardened-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Hardened-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Micro-5-5

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Micro-5-5-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Micro-5-5-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-Micro-5-5-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-SAP-Azure-3P

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-SAP-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-SAP-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-SAP-Hardened-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-SAPCAL-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP5-SAPCAL-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-Azure-3P

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-Azure-Basic

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-Azure-Standard

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-CHOST-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-CHOST-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-CHOST-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-CHOST-BYOS-GDC

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-EC2-ECS-HVM

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-HPC

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-HPC-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-HPC-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-HPC-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-HPC-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-HPC-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-Hardened-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-Hardened-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-Hardened-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-Azure-3P

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-Hardened

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-Hardened-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-Hardened-BYOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAP-Hardened-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAPCAL

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAPCAL-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP6-SAPCAL-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-Azure-3P

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-Azure-Basic

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-Azure-Standard

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-BYOS-GCE

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-CHOST-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-CHOST-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-CHOST-BYOS-GDC

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-EC2-ECS-HVM

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-HPC-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-HPC-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-HPC-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-HPC-BYOS-GCE

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-Hardened-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-Hardened-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-Hardened-BYOS-GCE

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAP-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAP-Azure-3P

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAP-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAP-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAP-BYOS-GCE

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAP-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAP-Hardened-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAPCAL-Azure

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP7-SAPCAL-EC2

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image proxy-salt-broker-image

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image server-image

python311-pyOpenSSL-23.2.0-150400.3.13.1

Image server-image-sles15sp7

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise Module for Public Cloud 15 SP4

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise Module for Python 3 15 SP7

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise Server 15 SP4-LTSS

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise Server 15 SP5-LTSS

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise Server 15 SP6-LTSS

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

python311-pyOpenSSL-23.2.0-150400.3.13.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

python311-pyOpenSSL-23.2.0-150400.3.13.1

openSUSE Leap 15.6

python311-pyOpenSSL-23.2.0-150400.3.13.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261192-1/
Link for SUSE-SU-2026:1192-1
https://lists.suse.com/pipermail/sle-updates/2026-April/045297.html
E-Mail link for SUSE-SU-2026:1192-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1259804
SUSE Bug 1259804
https://bugzilla.suse.com/1259808
SUSE Bug 1259808
https://www.suse.com/security/cve/CVE-2026-27448/
SUSE CVE CVE-2026-27448 page
https://www.suse.com/security/cve/CVE-2026-27459/
SUSE CVE CVE-2026-27459 page

Описание

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.

Затронутые продукты

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest:python311-pyOpenSSL-23.2.0-150400.3.13.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest:python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-BYOS-Azure:python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-BYOS-EC2:python311-pyOpenSSL-23.2.0-150400.3.13.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-27448.html
CVE-2026-27448
https://bugzilla.suse.com/1259804
SUSE Bug 1259804

Описание

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.

Затронутые продукты

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest:python311-pyOpenSSL-23.2.0-150400.3.13.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest:python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-BYOS-Azure:python311-pyOpenSSL-23.2.0-150400.3.13.1

Image SLES15-SP4-BYOS-EC2:python311-pyOpenSSL-23.2.0-150400.3.13.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-27459.html
CVE-2026-27459
https://bugzilla.suse.com/1259808
SUSE Bug 1259808