AlmaLinux 10 : python3.14-cryptography (ALSA-2026:64795)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:64795 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography:...

The vulnerability of the Python programming language’s cryptography interpreter lies in errors in the certificate validation process, which allows attackers to compromise the integrity of the protected information.

The vulnerability of the Python programming language’s cryptography interpreter is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

openSUSE 16 Security Update : python-cryptography (openSUSE-SU-2026:21685-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21685-1 advisory. - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. -...

Security update for python-cryptography (moderate)

openSUSE security update: security update for python-cryptography ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21685-1 Rating: moderate References: bsc1273516 bsc1273549 bsc1273551 Cross-References: CVE-2026-69247 CVE-2026-69248 CVE-2026-69249 CV...

SUSE-SU-2026:23404-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees...

SUSE-SU-2026:23570-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees...

OPENSUSE-SU-2026:21685-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees...

[SECURITY] Fedora 44 Update: python-cryptography-50.0.0-1.fc44

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...

Fedora 44 : pyOpenSSL / python-cryptography / python-pynitrokey (2026-9f07e6bc2b)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9f07e6bc2b advisory. Includes a fix for CVE-2026-69247, refer to https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5 for a more detailed description. Ful...

CVE-2026-69248

A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System DNS names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name e.g., .example.com even when a more restrictive nam...

CVE-2026-69249

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

ROOT-OS-DEBIAN-12-CVE-2026-26007 CVE-2026-26007 in python-cryptography - Patched by Root

Root has patched CVE-2026-26007 in the python-cryptography package for Root:Debian:12. Multiple fixed versions available...

Astra Linux – Vulnerability in python-cryptography

In the cryptography package for Python before version 3.3.2, certain sequences of update calls to symmetrically encrypt multi-GB values could lead to integer overflows and buffer overflows, as demonstrated by the Fernet class...

OESA-2026-3459 python-cryptography security update

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, when resolving invalid certificate chains that...

OESA-2026-3458 python-cryptography security update

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, when resolving invalid certificate chains that...

OESA-2026-3457 python-cryptography security update

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 49.0.0, when resolving invalid certificate chains that...

CVE-2026-69249 affecting package python-cryptography for versions less than 42.0.5-5

CVE-2026-69249 affecting package python-cryptography for versions less than 42.0.5-5. A patched version of the package is available...

SUSE-SU-2026:23196-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees bsc1273549. - CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-building bsc1273516...

SUSE-SU-2026:23247-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees bsc1273549. - CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-building bsc1273516...

python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...