Skip to content
OpenAdvisories
Medium ELSA-2024-2337 1 CVE

Moderate: python3.11-cryptography security update (Oracle Linux 9)

Published May 2, 2024 · Updated May 2, 2024

Ecosystem: Oracle Linux

Summary

[37.0.2-6]
- Security fix for CVE-2023-49083
- Resolves: RHEL-19832

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 python3.11-cryptography 0:37.0.2-6.el9

Vulnerabilities 1

  • Medium 5.9
    CVE-2023-49083

    cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerab…

    pyca cryptography py3-cassandra-medusa mitmproxy Debian Ubuntu Azure Linux Wolfi PyPI