VDB
RHSA-2026:87120
RHSA-2026:87120
PUBLISHED
CVSS 8.800000190734863 HIGH
A flaw was found in pyOpenSSL. The set_cookie_generate_callback callback function can be used to generate DTLS cookies. When the callback returns a cookie string or byte sequence longer than 256 bytes, a buffer overflow can be triggered due to a missing bounds checking before copying the data to a fixed-size buffer provided by the underlying OpenSSL library.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:d67e90330123a555d8e9d0d954426a8c6ee45f2fb97221140764929777ad7a53_amd64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:c1da3d541ffc366dc7543d23763fa6b85f2accc6885a08849aa4a227da2c1e49_arm64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:ef2ab1bf46f547cf03f23e034296328d8ec61b579bd4024875054953aa71f558_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:2e63c985c71cbc890ea83b520695987085421b1ac117a991444c97b91a417fc8_s390x as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:c109be0f45e636ad9f3cb98371b1fec6b18e3e80df3720ee1eebcdce52b0c65c_arm64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:3aca1ca9f26a24b679ead294dcfe753e0f702128753ec07209fd9cc8b96dc955_amd64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:b50e5e415e3f5c6c83e95a0cba0c08309dcbdd3b7e7d3413c982973cb583127e_amd64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:f2a6acadd88acb793879e36526db52e4a3782ad72de5daf5a624bd338f2dea48_amd64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:a78104751caefc01d8382bd2aab43b261d5bc8034a4103bdebf97b629aed7813_amd64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:5916b342d02fe7a5dd5bd9e71b5a06a6df6405d518d1a9acb8f59e7b13294107_s390x as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:f00553cd83df23f05493a780b9fc428bd7b6d7c14b967affe9a5ca4310f6f1a5_amd64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:83c9ad195e6ae32532d866b6c411ac477fa74a46e6333e33782c4083b4ffd832_arm64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ee7fb1d6b0a65f6fc8cd9d6ff2cfe56551699bfcdaf0d6d81126edce554b2ef6_s390x as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:d13a47f318755cf79c520e427c81bd5876529becf9fc1112af0d5c1df0e86b9e_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:9c00f6cbfb95d5f494535eef353b7b6c9275b597401393cda22ecf6bc070dadb_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d4c2821fb38e6302a9619334680e0666013ea61f0a24e8995c78b2d2ae681c4c_arm64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:03f30e5e1726b47751562d16ab3c074a8ae88a0cd44c06623dd6891b7e51fc0f_amd64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:e9f2da422e624b2fff0c4c23c8fdb32801c726a72c2101c5e385ef2e0022fcff_arm64 as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:82f4722e1870fa651fc86de51bf5cee77384d1c6df28f0d011dae3c599266f73_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 | * |
| Red Hat | registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:d8e326a9a6394fafc2e62da89271ff2229633e2868a87ea87414619018153f0e_s390x as a component of Red Hat Ansible Automation Platform 2.6 | * |
…and 98 more
Timeline
- Oct 21, 2026 CVE Published
- Oct 27, 2026 CVE Updated
- Oct 27, 2026 Distribution Patch
- Oct 27, 2026 Distribution Patch
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
- Oct 27, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:87120 advisory
- https://access.redhat.com/security/cve/CVE-2026-102266 advisory
- https://access.redhat.com/security/cve/CVE-2026-102267 advisory
- https://access.redhat.com/security/cve/CVE-2026-102268 advisory
- https://access.redhat.com/security/cve/CVE-2026-102271 advisory
- https://access.redhat.com/security/cve/CVE-2026-102272 advisory
- https://access.redhat.com/security/cve/CVE-2026-102273 advisory
- https://access.redhat.com/security/cve/CVE-2026-102925 advisory
- https://access.redhat.com/security/cve/CVE-2026-102930 advisory
- https://access.redhat.com/security/cve/CVE-2026-102937 advisory
- https://access.redhat.com/security/cve/CVE-2026-102938 advisory
- https://access.redhat.com/security/cve/CVE-2026-103262 advisory
- https://access.redhat.com/security/cve/CVE-2026-104851 advisory
- https://access.redhat.com/security/cve/CVE-2026-27459 advisory
- https://access.redhat.com/security/cve/CVE-2026-39836 advisory
- https://access.redhat.com/security/cve/CVE-2026-45820 advisory
- https://access.redhat.com/security/cve/CVE-2026-63374 advisory
- https://access.redhat.com/security/cve/CVE-2026-69243 advisory
- https://access.redhat.com/security/cve/CVE-2026-90959 advisory
- https://access.redhat.com/security/cve/CVE-2026-92982 advisory
…and 141 more