pyopenssl: CVE-2026-27459

[h0nIg]

Nixpkgs version

• Stable (25.11)
• Unstable (26.05)

Describe the bug

pyopenssl has a 9.8 CVE for 25.11 and 26.05

https://nvd.nist.gov/vuln/detail/CVE-2026-27459

Steps to reproduce

see CVE

Expected behaviour

fix CVE

Screenshots

No response

Relevant log output

Additional context

No response

System metadata

n/a

Notify maintainers

no maintainer, maybe @mweinelt @natsukium may help?

---

Note for maintainers: Please tag this issue in your pull request description. (i.e. Resolves #ISSUE.)

I assert that this issue is relevant for Nixpkgs

• I assert that this is a bug and not a support request.
• I assert that this is not a duplicate of an existing issue.
• I assert that I have read the NixOS Code of Conduct and agree to abide by it.

Is this issue important to you?

Add a 👍 reaction to issues you find important.

[mweinelt]

Fixes need to go through staging.

#510562 (unstable) and #510573 (25.11).