Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
azure/python-py may block connections using compromised certificates
published 11 days ago
Summary
The python-py package version 1.11.0-1 now automatically rejects certificates that are known to be compromised, even if your SSL settings don’t block them. This helps protect data but could interrupt services that rely on those certificates. Review your applications after updating and replace any affected certificates with trusted ones.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | python-py | <= 1.11.0-1 |
Original advisory text
CVE-2026-115557 affecting package python-py 1.11.0-1
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
References
Timeline
Published24 Oct 2026
Updated25 Oct 2026
First seen25 Oct 2026
Sources
AZL-111098 · OSV
Track software like this
Free during beta