SUSE CVE-2026-39892

🗓️ 10 Apr 2026 23:25:02Reported by Suse CVEType

susecve

susecve🔗 www.suse.com👁 3 Views

Cryptography had a buffer overflow with non-contiguous buffers in Python APIs like Hash.update; fixed in 46.0.7.

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities in the cryptography package	17 Jun 202607:04	–	ibm
IBM Security Bulletins	Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the cryptography package	21 May 202612:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in cryptography-46.0.3-cp311-abi3-macosx_10_9_universal2.whl	13 May 202603:59	–	ibm
IBM Security Bulletins	Security Bulletin: Location Service for ESRI Component uses cryptography-46.0.6, pyasn1-0.6.2, requests-2.32.5 and cryptography-46.0.5 library which were vulnerable to multiple CVEs	5 May 202603:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses cryptography-46.0.5-cp311-abi3-manylinux_2_34_x86_64.whl, cryptography-46.0.6-cp311-abi3-manylinux_2_34_x86_64.whl which is vulnerable to CVE-2026-34073, CVE-2026-39892	29 May 202610:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring and Dashboard operands are vulnerable to loss of confidentiality (CVE-2026-39892, CVE-2026-34073) and arbitrary code execution (CVE-2026-40087)	7 May 202613:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	7 May 202613:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Scheduler Optimizer uses cryptography-46.0.5-cp311-abi3-manylinux_2_34_x86_64.wh which is vulnerable to CVE-2026-34073	7 May 202613:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Predict Component uses cryptography-46.0.6-cp311-abi3-manylinux_2_34_x86_64.whl which is vulnerable to CVE-2026-39892	1 May 202614:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Cryptography [CVE-2026-34073] [CVE-2026-39892]	18 Jun 202619:15	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
OpenSUSE Tumbleweed	–	any	python311-cryptography	46.0.7-1.1	python311-cryptography-46.0.7-1.1.noarch.rpm
OpenSUSE Tumbleweed	–	any	python313-cryptography	46.0.7-1.1	python313-cryptography-46.0.7-1.1.noarch.rpm
OpenSUSE Tumbleweed	–	any	python314-cryptography	46.0.7-1.1	python314-cryptography-46.0.7-1.1.noarch.rpm

Source	Link
suse	www.suse.com/security/cve/CVE-2026-39892
suse	www.suse.com/support/security/rating/
bugzilla	www.bugzilla.suse.com/1261863

22 May 2026 02:20Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3

EPSS0.00525

cryptography buffer overflow python APIs non contiguous buffers hash update fixed version 46.0.7 unix