Fedora 44 : python-cryptography (2026-aa318887d6)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-aa318887d6 advisory. Changelog Wed Apr 8 2026 Jeremy Cline - 46.0.7-1 - Update to 46.0.7 - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be passed to APIs tha...

CVE-2026-39892

creationtimestamp| type| source ---|---|--- 2026-04-15 17:20:42+00:00| seen| Telegram/iUoBG-vF-CkTsWyCM6Li0-JDSLT3y0wia1SGPubhjeGviU 2026-07-01 14:16:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplpfuexzg2b 2026-07-10 15:39:42+00:00| seen|...

Fedora 43 : python-cryptography (2026-95233f8a79)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-95233f8a79 advisory. Changelog Wed Apr 8 2026 Jeremy Cline - 46.0.7-1 - Update to 46.0.7 - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be passed to APIs tha...

CVE-2026-39892 cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers e.g. Hash.update, this could lead to buffer overflows. This vulnerability is fixed in...