711 matches found
Important: Red Hat Security Advisory: python3.14-cryptography security update
An update for python3.14-cryptography is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...
AlmaLinux 9 : python3.14-cryptography (ALSA-2026:64774)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:64774 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography:...
ALSA-2026:64774 Important: python3.14-cryptography security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
RHEL 9 : python3.14-cryptography (RHSA-2026:64774)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:64774 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
RHEL 10 : python3.14-cryptography (RHSA-2026:64795)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:64795 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
ALSA-2026:64795 Important: python3.14-cryptography security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
AlmaLinux 10 : python3.14-cryptography (ALSA-2026:64795)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:64795 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography:...
Important: python3.14-cryptography security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Python cryptography Certificate Validation
The vulnerability of the Python programming language’s cryptography interpreter is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
openSUSE 16 Security Update : python-cryptography (openSUSE-SU-2026:21685-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21685-1 advisory. - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. -...
Security update for python-cryptography (moderate)
openSUSE security update: security update for python-cryptography ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21685-1 Rating: moderate References: bsc1273516 bsc1273549 bsc1273551 Cross-References: CVE-2026-69247 CVE-2026-69248 CVE-2026-69249 CV...
SUSE-SU-2026:23404-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees...
SUSE-SU-2026:23570-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees...
OPENSUSE-SU-2026:21685-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees...
[SECURITY] Fedora 44 Update: python-cryptography-50.0.0-1.fc44
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...
Fedora 44 : pyOpenSSL / python-cryptography / python-pynitrokey (2026-9f07e6bc2b)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9f07e6bc2b advisory. Includes a fix for CVE-2026-69247, refer to https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5 for a more detailed description. Ful...
CVE-2026-69248
A flaw was found in python-cryptography versions 46.0.6 through 48.x. The X.509 verifier incorrectly handles wildcard DNS Subject Alternative Names when evaluating permitted name constraints: a leaf SAN such as .example.com may be accepted under a more specific permitted subtree for example...
CVE-2026-69249
A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...