Skip to content
OpenAdvisories
Medium RHSA-2025:13104 1 CVE

Red Hat Security Advisory: python-cryptography security update

Published Aug 6, 2025 · Updated Aug 27, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python-cryptography 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python-cryptography-debugsource 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-cryptography 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-cryptography-debuginfo 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python-cryptography 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python-cryptography-debugsource 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3-cryptography 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3-cryptography-debuginfo 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python-cryptography 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python-cryptography-debugsource 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3-cryptography 0:3.2.1-5.1.el8_6.1
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3-cryptography-debuginfo 0:3.2.1-5.1.el8_6.1

Vulnerabilities 1

  • Medium 5.9
    CVE-2023-49083

    cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerab…

    pyca cryptography py3-cassandra-medusa mitmproxy Debian Ubuntu Azure Linux Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255331
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13104.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-49083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-49083
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-49083
  • article
    https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a
  • article
    https://github.com/pyca/cryptography/pull/9926
  • article
    https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97