Skip to content
OpenAdvisories
Medium RHSA-2024:3105 1 CVE

Red Hat Security Advisory: python3.11-cryptography security update

Published Sep 28, 2024 · Updated Aug 27, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream python3.11-cryptography 0:37.0.2-6.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3.11-cryptography-debuginfo 0:37.0.2-6.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3.11-cryptography-debugsource 0:37.0.2-6.el8

Vulnerabilities 1

  • Medium 5.9
    CVE-2023-49083

    cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerab…

    pyca cryptography py3-cassandra-medusa mitmproxy Debian Ubuntu Azure Linux Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255331
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3105.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-49083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-49083
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-49083
  • article
    https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a
  • article
    https://github.com/pyca/cryptography/pull/9926
  • article
    https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97