Skip to content
OpenAdvisories
High RHSA-2026:64795 2 CVEs

Red Hat Security Advisory: python3.14-cryptography security update

Published Sep 8, 2026 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.2 python3.14-cryptography 0:45.0.4-4.el10_2.5
Red Hat · RHEL 10 enterprise_linux:10.2 python3.14-cryptography-debuginfo 0:45.0.4-4.el10_2.5
Red Hat · RHEL 10 enterprise_linux:10.2 python3.14-cryptography-debugsource 0:45.0.4-4.el10_2.5

Vulnerabilities 2

  • High 8.7
    CVE-2026-69249

    python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

    python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processi…

    pyca cryptography kserve-storage-controller superset-6.0 Debian Ubuntu Azure Linux Wolfi PyPI
  • Medium 6.9
    CVE-2026-69248

    python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its D…

    pyca cryptography kserve-storage-controller superset-6.0 Debian Ubuntu Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510815
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510830
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_64795.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-69248
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-69248
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-69248
  • article
    https://github.com/pyca/cryptography/commit/4d035a4225965edeffd312079a510ef25fcfdcb2
  • article
    https://github.com/pyca/cryptography/pull/14888
  • article
    https://github.com/pyca/cryptography/security/advisories/GHSA-m2h6-j472-rp4c
  • report
    https://access.redhat.com/security/cve/CVE-2026-69249
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-69249
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-69249
  • article
    https://github.com/pyca/cryptography/commit/4a12cf49675a184e47f912b00b04f3a629283582
  • article
    https://github.com/pyca/cryptography/pull/14960
  • article
    https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww