Skip to content
OpenAdvisories
High ELSA-2025-20364 1 CVE

Important: python3.12-cryptography security update (Oracle Linux 8)

Published Jun 6, 2025 · Updated Jun 6, 2025

Ecosystem: Oracle Linux

Summary

[41.0.7-1.0.1]
- CVE-2024-26130 [Orabug: 37982815]

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 python3.12-cryptography 0:41.0.7-1.0.1.el8

Vulnerabilities 1

  • High 7.5
    CVE-2024-26130

    cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did n…

    pyca cryptography py3-cassandra-medusa kubeflow-pipelines Debian Ubuntu Wolfi PyPI