[OE-core] [PATCH 27/40] python3-pyopenssl: upgrade 25.3.0 -> 26.0.0

Wang Mingyu
2026-03-19T10:15:25Z

Changes:
- Added support for using aws-lc instead of OpenSSL.
- Properly raise an error if a DTLS cookie callback returned a cookie longer
than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a
buffer-overflow. Credit to dark_haxor for reporting the issue. CVE-2026-27459
- Added OpenSSL.SSL.Connection.get_group_name to determine which group name was
negotiated.
- Context.set_tlsext_servername_callback now handles exceptions raised in the
callback by calling sys.excepthook and returning a fatal TLS alert.
Previously, exceptions were silently swallowed and the handshake would proceed
as if the callback had succeeded. Credit to Leury Castillo for reporting this
issue. CVE-2026-27448

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
...{python3-pyopenssl_25.3.0.bb => python3-pyopenssl_26.0.0.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-devtools/python/{python3-pyopenssl_25.3.0.bb => python3-pyopenssl_26.0.0.bb} (85%)

diff --git a/meta/recipes-devtools/python/python3-pyopenssl_25.3.0.bb b/meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb
similarity index 85%
rename from meta/recipes-devtools/python/python3-pyopenssl_25.3.0.bb
rename to meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb
index b5230293d2..ca2ee93d29 100644
--- a/meta/recipes-devtools/python/python3-pyopenssl_25.3.0.bb
+++ b/meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb
@@ -5,7 +5,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"

DEPENDS += "openssl python3-cryptography"

-SRC_URI[sha256sum] = "c981cb0a3fd84e8602d7afc209522773b94c1c2446a3c710a75b06fe1beae329"
+SRC_URI[sha256sum] = "f293934e52936f2e3413b89c6ce36df66a0b34ae1ea3a053b8c5020ff2f513fc"

inherit pypi setuptools3

--
2.43.0