Skip to content
OpenAdvisories
High RHSA-2026:7295 3 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 20, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 python-cryptography 0:46.0.7-1.hum1

Vulnerabilities 3

  • High 8.2
    CVE-2026-26007

    cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() a…

    pyca cryptography open-webui kubeflow-pipelines-apiserver Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • Medium 6.9
    CVE-2026-39892

    cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer o…

    pyca cryptography open-webui airflow-3 Debian Alpine Wolfi PyPI
  • Low 1.7
    CVE-2026-34073

    cryptography has incomplete DNS name constraint enforcement on peer names

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child certificates, and not the "peer name" presented during each val…

    pyca cryptography airflow-3 kserve-storage-controller Debian Alpine Wolfi PyPI

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-26007
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-39892
  • report
    https://access.redhat.com/security/cve/CVE-2026-34073
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7295.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2438762
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-26007
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-26007
  • article
    https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c
  • article
    https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2453276
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-34073
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-34073
  • article
    https://github.com/pyca/cryptography/security/advisories/GHSA-m959-cc7f-wv43
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2456735
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-39892
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-39892
  • article
    http://www.openwall.com/lists/oss-security/2026/04/08/12
  • article
    https://github.com/pyca/cryptography/commit/622d672e429a7cff836a23c5903683dbec1901f5
  • article
    https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq