7 matches found
python3.14-cryptography security update
An update is available for python3.14-cryptography. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented...
MiracleLinux 9 : python3.14-cryptography-45.0.4-4.el9_8.6 (AXSA:2026-1788:01)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1788:01 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography...
Important: Red Hat Security Advisory: python3.14-cryptography security update
An update for python3.14-cryptography is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...
SUSE-SU-2026:23196-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees bsc1273549. - CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-building bsc1273516...
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
...
CVE-2026-69249 python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same...