Skip to content
OpenAdvisories
Medium ELSA-2025-14553 1 CVE

Moderate: python-cryptography security update (Oracle Linux 8)

Published Aug 26, 2025 · Updated Aug 26, 2025

Ecosystem: Oracle Linux

Summary

[3.2.1-8]
- Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates,
resolves RHEL-97452

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 python3-cryptography 0:3.2.1-8.el8_10

Vulnerabilities 1

  • Medium 5.9
    CVE-2023-49083

    cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerab…

    pyca cryptography py3-cassandra-medusa mitmproxy Debian Ubuntu Azure Linux Wolfi PyPI