DEBIAN-CVE-2026-119170: Debian/python3.14 vulnerability

Published Nov 6, 2026

Updated

There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected.

Affected Software

1 affected component

debian/python3.14*

Event History

Nov 6, 2026

CVE Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are affected by this issue?

Only systems running Python 3.14.10 with OpenSSL operating in FIPS mode are affected. Other Python versions are unaffected.

Is a default Python deployment affected?

The issue requires OpenSSL FIPS mode to be in use. Deployments not using OpenSSL in FIPS mode are not affected.

DEBIAN-CVE-2026-119170: Debian/python3.14 vulnerability

Affected Software

Event History

Frequently Asked Questions

Which systems are affected by this issue?

Is a default Python deployment affected?

Company

Resources

Contact

Frequently Asked Questions

Which systems are affected by this issue?

Is a default Python deployment affected?