SecurityFan score 65 · Tier A
[oss-security][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
The Brief
- A regression in Python 3.14.10 breaks FIPS enforcement of hash algorithms, tracked as CVE-2026-119170.
- The regression affects only Python 3.14.10, according to the oss-security post forwarding the Python security announcement.
- The issue was announced on the Python security announce list on 2026-11-06.
Why it matters
Developers running Python 3.14.10 in FIPS-regulated environments may find that hash algorithms are not restricted as FIPS requires, which can affect compliance.
Who’s affected
- Teams running Python 3.14.10 in FIPS mode
Posted by Alan Coopersmith on Nov 06 -------- Forwarded Message -------- Subject: [Security-announce][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10 Date: Fri, 6 Nov 2026 14:45:25 +0000 From: Seth Larson <seth () python org>…
Timeline
Regression in FIPS hash algorithm enforcement announced on Python security announce list
Open Source Security
[oss-security][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10