Summary
[43.0.0-4]
- Fix CVE-2026-69249: add X.509 signature validation budget
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | python3-cryptography | 0:43.0.0-4.el10_2.5 |
Vulnerabilities 1
-
High 8.7
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processi…