Skip to content
OpenAdvisories
Medium ELSA-2025-15874 1 CVE

Moderate: python-cryptography security update (Oracle Linux 9)

Published Sep 16, 2025 · Updated Sep 16, 2025

Ecosystem: Oracle Linux

Summary

[36.0.1-5]
- Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates,
resolves RHEL-97450

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 python3-cryptography 0:36.0.1-5.el9_6

Vulnerabilities 1

  • Medium 5.9
    CVE-2023-49083

    cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerab…

    pyca cryptography py3-cassandra-medusa mitmproxy Debian Ubuntu Azure Linux Wolfi PyPI