{
  "cveId": "CVE-2026-27459",
  "url": "https://patchblox.com/security/cve/CVE-2026-27459",
  "summary": "CVE-2026-27459 is fixed in 51 products on 1 platform, first by DEBIAN-CVE-2026-27459, released March 18, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "pyOpenSSL DTLS cookie callback buffer overflow",
  "description": "pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to \u0060set_cookie_generate_callback\u0060 returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.",
  "published": "2026-03-17T17:00:00Z",
  "severity": "Important",
  "cvss": 9.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "cwe": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
  "epss": 0.00748,
  "epssPercentile": 0.55121,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27459",
  "fixes": [
    {
      "platform": "linux",
      "product": "kryoptic",
      "release": "Fedora 43",
      "fixedVersion": "1.5.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "kryoptic-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "1.5.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "kryoptic-debugsource",
      "release": "Fedora 43",
      "fixedVersion": "1.5.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "kryoptic-tools",
      "release": "Fedora 43",
      "fixedVersion": "1.5.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "kryoptic-tools-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "1.5.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "pyOpenSSL",
      "release": "Fedora 43",
      "fixedVersion": "26.0.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "pyOpenSSL-doc",
      "release": "Fedora 43",
      "fixedVersion": "26.0.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "pyopenssl",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "25.0.0-1\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-27459",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-27459",
      "released": "2026-03-18T00:16:19Z"
    },
    {
      "platform": "linux",
      "product": "pyopenssl",
      "release": "Debian 14",
      "fixedVersion": "26.0.0-1",
      "fix": "DEBIAN-CVE-2026-27459",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-27459",
      "released": "2026-03-18T00:16:19Z"
    },
    {
      "platform": "linux",
      "product": "python-cryptography",
      "release": "Fedora 43",
      "fixedVersion": "46.0.5-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "python-cryptography-debugsource",
      "release": "Fedora 43",
      "fixedVersion": "46.0.5-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "python-pyOpenSSL",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "23.2.0-150400.3.13.1",
      "fix": "SUSE-SU-2026:1192-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1192-1",
      "released": "2026-04-07T08:39:34Z"
    },
    {
      "platform": "linux",
      "product": "python-pyOpenSSL",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "25.0.0-160000.3.1",
      "fix": "OPENSUSE-SU-2026:20419-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20419-1",
      "released": "2026-03-25T03:41:43Z"
    },
    {
      "platform": "linux",
      "product": "python-pyOpenSSL",
      "release": "sles 15.6",
      "fixedVersion": "23.2.0-150400.3.13.1",
      "fix": "SUSE-SU-2026:1192-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1192-1",
      "released": "2026-04-07T08:39:34Z"
    },
    {
      "platform": "linux",
      "product": "python-pyOpenSSL",
      "release": "sles 15.7",
      "fixedVersion": "23.2.0-150400.3.13.1",
      "fix": "SUSE-SU-2026:1192-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1192-1",
      "released": "2026-04-07T08:39:34Z"
    },
    {
      "platform": "linux",
      "product": "python-pyOpenSSL",
      "release": "sles 16.0",
      "fixedVersion": "25.0.0-160000.3.1",
      "fix": "SUSE-SU-2026:20930-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20930-1",
      "released": "2026-03-25T03:41:42Z"
    },
    {
      "platform": "linux",
      "product": "python3-cryptography",
      "release": "Fedora 43",
      "fixedVersion": "46.0.5-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "python3-cryptography-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "46.0.5-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "python3-openssl",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "23.2.0-1ubuntu0.1",
      "fix": "python3-openssl 23.2.0-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-python3-openssl-23.2.0-1ubuntu0.1",
      "released": "2026-04-15T18:59:29Z"
    },
    {
      "platform": "linux",
      "product": "python3-openssl",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "25.0.0-1ubuntu0.1",
      "fix": "python3-openssl 25.0.0-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-python3-openssl-25.0.0-1ubuntu0.1",
      "released": "2026-04-15T18:59:31Z"
    },
    {
      "platform": "linux",
      "product": "python3-pyOpenSSL",
      "release": "Fedora 43",
      "fixedVersion": "26.0.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-asn1",
      "release": "Fedora 43",
      "fixedVersion": "0.22.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-asn1\u002Bdefault-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.22.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-asn1\u002Bstd-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.22.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-asn1-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.22.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-asn1_derive",
      "release": "Fedora 43",
      "fixedVersion": "0.22.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-asn1_derive\u002Bdefault-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.22.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-asn1_derive-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.22.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-cryptoki",
      "release": "Fedora 43",
      "fixedVersion": "0.12.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-cryptoki\u002Bdefault-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.12.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-cryptoki\u002Bgenerate-bindings-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.12.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-cryptoki\u002Bserde-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.12.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-cryptoki-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.12.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-cryptoki-sys",
      "release": "Fedora 43",
      "fixedVersion": "0.5.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-cryptoki-sys\u002Bbindgen-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.5.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-cryptoki-sys\u002Bdefault-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.5.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-cryptoki-sys\u002Bgenerate-bindings-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.5.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-cryptoki-sys-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.5.0-2.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Baead-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bcipher-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bdefault-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bdsa-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bec-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Becdh-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Becdsa-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Beddsa-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bfpe-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bhkdf-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bkeywrap-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bmac-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bnum-bigint-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bprimality-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Brsa_enc-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Brsa_sig-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof\u002Bxdh-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    },
    {
      "platform": "linux",
      "product": "rust-wycheproof-devel",
      "release": "Fedora 43",
      "fixedVersion": "0.6.0-1.fc43",
      "fix": "FEDORA-2026-9D5B9F45EC",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-9d5b9f45ec",
      "released": "2026-03-19T13:35:20Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}