Skip to content
OpenAdvisories
High ELSA-2025-15608 1 CVE

Important: python3.12-cryptography security update (Oracle Linux 9)

Published Sep 10, 2025 · Updated Sep 10, 2025

Ecosystem: Oracle Linux

Summary

[41.0.7-2.1]
- Security fix for CVE-2024-26130
Resolves: RHEL-112483

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 python3.12-cryptography 0:41.0.7-2.el9_6.1

Vulnerabilities 1

  • High 7.5
    CVE-2024-26130

    cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did n…

    pyca cryptography py3-cassandra-medusa kubeflow-pipelines Debian Ubuntu Wolfi PyPI