From 2e54546bd4b123720c47050b18b2006ec313fe9e Mon Sep 17 00:00:00 2001
From: sethmlarson <18519037+sethmlarson@users.noreply.github.com>
Date: Sun, 25 Oct 2026 00:46:32 +0000
Subject: [PATCH] Update OSV records from CVE

---
 .../python/PSF-0000-CVE-2026-115557.json      | 134 ++++++++++++++++++
 1 file changed, 134 insertions(+)
 create mode 100644 advisories/python/PSF-0000-CVE-2026-115557.json

diff --git a/advisories/python/PSF-0000-CVE-2026-115557.json b/advisories/python/PSF-0000-CVE-2026-115557.json
new file mode 100644
index 0000000..313e44c
--- /dev/null
+++ b/advisories/python/PSF-0000-CVE-2026-115557.json
@@ -0,0 +1,134 @@
+{
+  "schema_version": "1.5.0",
+  "id": "PSF-0000-CVE-2026-115557",
+  "aliases": [
+    "CVE-2026-115557"
+  ],
+  "published": "2026-10-24T14:15:14.283Z",
+  "modified": "2026-10-25T00:39:26.520Z",
+  "details": "Python has added a denylist for known compromised certificates to the \"ssl\" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.",
+  "affected": [
+    {
+      "ranges": [
+        {
+          "type": "GIT",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "21a50891ab4be2e9955239e625ae2b40c6b1854d"
+            },
+            {
+              "fixed": "36cd295f32fc9ba19399e01abee91231440a41dd"
+            },
+            {
+              "fixed": "48d9b2712cd52206c7a5882d0fdca4863ed65e93"
+            },
+            {
+              "fixed": "7dd8b4736a1419750b94a388e6d158be15836fe6"
+            },
+            {
+              "fixed": "98f0e4ed349f370dc8a00366da1a9797e11c9ed5"
+            },
+            {
+              "fixed": "a17d9ef549008133eadf20689b1f4787902efe5b"
+            },
+            {
+              "fixed": "af52b41afa4330fb38583db553631baa2f122f90"
+            },
+            {
+              "fixed": "c7fd7edf7e0d122a3973cf676fae21b6aaa650a8"
+            },
+            {
+              "fixed": "e2a9dd97ef9571c710ac0afaa834c8879aebce78"
+            },
+            {
+              "fixed": "e4500d8a437ee5b988a5410cb9b59d177aa01370"
+            },
+            {
+              "fixed": "e4f63e65a93cf44c14274aa987e644b8c003625e"
+            },
+            {
+              "fixed": "e9bf2cf84eebf838a1edaa1c648c2b36345b99d3"
+            }
+          ],
+          "repo": "https://github.com/python/cpython"
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2026/10/20/29"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/python/cpython/pull/160042"
+    },
+    {
+      "type": "REPORT",
+      "url": "https://github.com/python/cpython/issues/160040"
+    },
+    {
+      "type": "WEB",
+      "url": "https://emudhra.we-have-a-problem.com/"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/21a50891ab4be2e9955239e625ae2b40c6b1854d"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/36cd295f32fc9ba19399e01abee91231440a41dd"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/48d9b2712cd52206c7a5882d0fdca4863ed65e93"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/7dd8b4736a1419750b94a388e6d158be15836fe6"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/98f0e4ed349f370dc8a00366da1a9797e11c9ed5"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/a17d9ef549008133eadf20689b1f4787902efe5b"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/af52b41afa4330fb38583db553631baa2f122f90"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/c7fd7edf7e0d122a3973cf676fae21b6aaa650a8"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/e2a9dd97ef9571c710ac0afaa834c8879aebce78"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/e4500d8a437ee5b988a5410cb9b59d177aa01370"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/e4f63e65a93cf44c14274aa987e644b8c003625e"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/python/cpython/commit/e9bf2cf84eebf838a1edaa1c648c2b36345b99d3"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": []
+  }
+}
\ No newline at end of file