Posted by Alan Coopersmith on Nov 06 Forwarded Message Subject: [Security-announce][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10 Date: Fri, 6 Nov 2026 14:45:25 +0000 From: Seth Larson Reply-To: security-sig () python org To: security-announce () python org There is a HIGH severity vulnerability affecting CPython. There was a regression in how FIPS algorithms were...
[oss-security][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/564
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
A Hybrid Approach for Automated Security Pattern Recovery
arXiv:2611.05823v1 Announce Type: new Abstract: Security-by-design emphasises integrating security into software design and development. Security pattern catalogues…
How Deterministic SAST and AI Security Agents Divide the Work: Coverage, Harness Policy and Cost in Snyk VulnBench 2.0
arXiv:2610.38617v1 Announce Type: new Abstract: We ask what AI coding agents and AI security harnesses find that deterministic static application security testing (SAST)…
CPython [CVE-2026-116566] socket.getaddrinfo() accepts embedded null bytes in host and port
Posted by Alan Coopersmith on Oct 29 Forwarded Message Subject: [Security-announce][CVE-2026-116566] socket.getaddrinfo() accepts embedded null bytes in host and port…
AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497
Number: AL26-027 Date: October 28, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently…
Re: Information for Python users regarding eMudhra / emSign CA certificate security incident
Posted by Kevin Riggle on Oct 27 The discuss.python.org conversation on that issue has long since moved on, so asking here: The macOS remediation advice on the official…
Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497)
Researchers have demonstrated remote code execution through CVE-2026-111497, an out-of-bounds write in Google's Brotli decoder library, and public proofs-of-concept…