Skip to content
OpenAdvisories
High ELSA-2024-12078 1 CVE

Important: python3.11-cryptography security update (Oracle Linux 8)

Published Jan 18, 2024 · Updated Jan 18, 2024

Ecosystem: Oracle Linux

Summary

[37.0.2-5.0.1]
- Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates [Orabug: 36143834]

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 python3.11-cryptography 0:37.0.2-5.0.1.el9

Vulnerabilities 1

  • Medium 5.9
    CVE-2023-49083

    cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerab…

    pyca cryptography py3-cassandra-medusa mitmproxy Debian Ubuntu Azure Linux Wolfi PyPI