From: Wang Mingyu <[email protected]> Changes: - Added support for using aws-lc instead of OpenSSL. - Properly raise an error if a DTLS cookie callback returned a cookie longer than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a buffer-overflow. Credit to dark_haxor for reporting the issue. CVE-2026-27459 - Added OpenSSL.SSL.Connection.get_group_name to determine which group name was negotiated. - Context.set_tlsext_servername_callback now handles exceptions raised in the callback by calling sys.excepthook and returning a fatal TLS alert. Previously, exceptions were silently swallowed and the handshake would proceed as if the callback had succeeded. Credit to Leury Castillo for reporting this issue. CVE-2026-27448
Signed-off-by: Wang Mingyu <[email protected]> --- ...{python3-pyopenssl_25.3.0.bb => python3-pyopenssl_26.0.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-pyopenssl_25.3.0.bb => python3-pyopenssl_26.0.0.bb} (85%) diff --git a/meta/recipes-devtools/python/python3-pyopenssl_25.3.0.bb b/meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb similarity index 85% rename from meta/recipes-devtools/python/python3-pyopenssl_25.3.0.bb rename to meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb index b5230293d2..ca2ee93d29 100644 --- a/meta/recipes-devtools/python/python3-pyopenssl_25.3.0.bb +++ b/meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb @@ -5,7 +5,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" DEPENDS += "openssl python3-cryptography" -SRC_URI[sha256sum] = "c981cb0a3fd84e8602d7afc209522773b94c1c2446a3c710a75b06fe1beae329" +SRC_URI[sha256sum] = "f293934e52936f2e3413b89c6ce36df66a0b34ae1ea3a053b8c5020ff2f513fc" inherit pypi setuptools3 -- 2.43.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#233489): https://lists.openembedded.org/g/openembedded-core/message/233489 Mute This Topic: https://lists.openembedded.org/mt/118397631/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
