Skip to content
OpenAdvisories
Medium RHSA-2025:15874 1 CVE

Red Hat Security Advisory: python-cryptography security update

Published Sep 16, 2025 · Updated Aug 27, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::baseos python-cryptography 0:36.0.1-5.el9_6
Red Hat · RHEL 9 enterprise_linux:9::baseos python-cryptography-debugsource 0:36.0.1-5.el9_6
Red Hat · RHEL 9 enterprise_linux:9::baseos python3-cryptography 0:36.0.1-5.el9_6
Red Hat · RHEL 9 enterprise_linux:9::baseos python3-cryptography-debuginfo 0:36.0.1-5.el9_6

Vulnerabilities 1

  • Medium 5.9
    CVE-2023-49083

    cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerab…

    pyca cryptography py3-cassandra-medusa mitmproxy Debian Ubuntu Azure Linux Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255331
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15874.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-49083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-49083
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-49083
  • article
    https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a
  • article
    https://github.com/pyca/cryptography/pull/9926
  • article
    https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97