This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-115557 →
Unrated
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configure...
DEBIAN-CVE-2026-115557
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Debian:12 | python3.11 |
All versions |
— |
| Debian:13 | python3.13 |
All versions |
— |
| Debian:14 | python3.13 |
All versions |
— |
| Debian:14 | python3.14 |
All versions |
— |
| Debian:14 | python3.15 |
All versions |
— |
Original description The description as published by the source.
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
Source: OSV.dev (Open Source Vulnerabilities) OSV
References
- advisory security-tracker.debian.org