Debian Patches

Status for pyopenssl/25.0.0-1+deb13u1

Patch Description Author Forwarded Bugs Origin Last update
0001-disable-test_set_default_verify_paths-since-it-tries.patch disable test_set requiring network access Andrey Rakhmatullin <wrar@debian.org> no 2025-01-17
0003-Fix-running-tests-on-32-bit-time_t-platforms.patch Fix running tests on 32-bit time_t platforms. Andrey Rakhmatullin <wrar@debian.org> no 2024-03-18
0001-Handle-exceptions-in-set_tlsext_servername_callback-.patch Handle exceptions in set_tlsext_servername_callback callbacks (#1478)
When the servername callback raises an exception, call sys.excepthook
with the exception info and return SSL_TLSEXT_ERR_ALERT_FATAL to abort
the handshake. Previously, exceptions would propagate uncaught through
the CFFI callback boundary.

https://claude.ai/code/session_01P7y1XmWkdtC5UcmZwGDvGi		 Alex Gaynor <alex.gaynor@gmail.com> no 2026-02-16
0002-Fix-buffer-overflow-in-DTLS-cookie-generation-callba.patch Fix buffer overflow in DTLS cookie generation callback (#1479)
The cookie generate callback copied user-returned bytes into a
fixed-size native buffer without enforcing a maximum length. A
callback returning more than DTLS1_COOKIE_LENGTH bytes would overflow
the OpenSSL-provided buffer, corrupting adjacent memory.		 Alex Gaynor <alex.gaynor@gmail.com> no 2026-02-18

All known versions for source package 'pyopenssl'

Links