Regression in FIPS enforcement of hash algorithms affects only Python 3.14.10
Original title: [oss-security][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
The regression is HIGH severity and affects only CPython 3.14.10.
A regression in FIPS enforcement of hash algorithms in CPython has been discovered. The issue impacts only version 3.14.10. Seth Larson reported the vulnerability to security-announce and oss-security.
Unconfirmed: The specific technical details of the regression are not provided in the announcement.
- HIGH severity
- Only Python 3.14.10 impacted
- FIPS hash algorithm enforcement
Impact: FIPS enforcement of hash algorithms
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-119170 | FIPS enforcement regression in Python hashlib (OpenSSL FIPS mode) | 8.2 | — |
From the original article
Posted by Alan Coopersmith on Nov 06 -------- Forwarded Message -------- Subject: [Security-announce][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3. 14. 10 Date: Fri, 6 Nov 2026 14:45:25 +0000 From: Seth Larson Reply-To: security-sig () python org To: security-announce () python org There is a HIGH severity vulnerability affecting CPython.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.