Skip to content
OpenAdvisories
Medium ELSA-2024-19480 1 CVE

Moderate: python-cryptography security update (Oracle Linux 7)

Published Mar 20, 2024 · Updated Mar 20, 2024

Ecosystem: Oracle Linux

Summary

[3.2.1-1.0.1]
- Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates [Orabug: 36143838]

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 python36-cryptography 0:3.2.1-1.0.1.el7

Vulnerabilities 1

  • Medium 5.9
    CVE-2023-49083

    cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerab…

    pyca cryptography py3-cassandra-medusa mitmproxy Debian Ubuntu Azure Linux Wolfi PyPI