Description
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pyca | cryptography | >=1.8, < 39.0.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | python-cryptography | 38.0.4-3 | — |
| Debian 13 | python-cryptography | 38.0.4-3 | — |
| Debian 12 | python-cryptography | 38.0.4-3 | — |
| Debian 11 | python-cryptography | 3.3.2-1+deb11u1 | DLA-3922-1 |
| Debian 10 | python-cryptography | 2.6.1-3+deb10u3 | DLA-3331-2, DLA-3331-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | python-cryptography | 46.0.5-1ubuntu2.2 | USN-8776-1 |
| Ubuntu 22.04 LTS | python-cryptography | 3.4.8-1ubuntu2.1 | USN-6539-1 |
| Ubuntu 20.04 LTS | python-cryptography | 2.8-3ubuntu0.2 | USN-6539-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | python-cryptography | 2.1.4-1ubuntu1.4+esm6 | USN-8776-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | python-cryptography +1 | 36.0.1-4.el9 | RHSA-2023:6615 |
| RHEL 8 | Cython +1 | 0.29.21-5.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | PyYAML +1 | 5.4.1-1.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | mod_wsgi +1 | 4.7.1-7.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | numpy +3 | 1.19.4-3.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | pybind11 +2 | 2.7.1-1.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | pytest +1 | 6.0.2-2.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-PyMySQL +1 | 0.10.1-2.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-attrs +1 | 20.3.0-2.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-cffi +1 | 1.14.3-2.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-chardet +1 | 3.0.4-19.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-cryptography +1 | 3.2.1-6.el8 | RHSA-2024:2985, RHSA-2023:7096 |
| RHEL 8 | python-idna +1 | 2.10-3.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-iniconfig +1 | 1.1.1-2.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-lxml +1 | 4.6.5-1.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-more-itertools +1 | 8.5.0-2.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-packaging +1 | 20.4-4.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-pluggy +1 | 0.13.1-3.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-ply +1 | 3.11-10.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-psutil +1 | 5.8.0-4.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-psycopg2 +3 | 2.8.6-3.module+el8.10.0+21142+453d2b75 | RHSA-2024:2985 |
| RHEL 8 | python-py +1 | 1.10.0-1.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-pycparser +1 | 2.20-3.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-pysocks +1 | 1.7.1-4.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-requests +1 | 2.25.0-3.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-toml +1 | 0.10.1-5.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-urllib3 +1 | 1.25.10-5.module+el8.10.0+20443+f0a692fe | RHSA-2024:2985 |
| RHEL 8 | python-wcwidth +1 | 0.2.5-3.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python-wheel +2 | 1:0.35.1-4.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python39 +7 | 3.9.18-3.module+el8.10.0+21142+453d2b75 | RHSA-2024:2985 |
| RHEL 8 | python39-cryptography | 3.3.1-3.module+el8.10.0+21271+eccd1d86 | RHSA-2024:2985 |
| RHEL 8 | python39-pip +2 | 20.2.4-9.module+el8.10.0+21329+8d76b841 | RHSA-2024:2985 |
| RHEL 8 | python39-pyparsing +1 | 2.4.7-5.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | python39-setuptools +2 | 50.3.2-5.module+el8.10.0+20345+671a55aa | RHSA-2024:2985 |
| RHEL 8 | python39-six +1 | 1.15.0-3.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 8 | scipy +1 | 1.5.4-5.module+el8.9.0+19644+d68f775d | RHSA-2024:2985 |
| RHEL 3 | rh-python38-python +8 | 3.8.18-2.el7 | RHSA-2023:6793 |
| RHEL 3 | rh-python38-python-cryptography | 2.8-6.el7 | RHSA-2023:6793 |
| RHEL 3 | rh-python38-python-pip +1 | 19.3.1-4.el7 | RHSA-2023:6793 |
| RHEL 3 | rh-python38-python-requests | 2.22.0-11.el7 | RHSA-2023:6793 |
| RHEL 3 | rh-python38-python-setuptools +1 | 41.6.0-8.el7 | RHSA-2023:6793 |
| RHEL 3 | rh-python38-python-wheel +1 | 0.33.6-9.el7 | RHSA-2023:6793 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Ansible Automation Platform Inside 2 | python-cryptography +1 | 38.0.4-2.el9ap | RHSA-2023:4693 |
| Red Hat Ansible Automation Platform Inside 2 | python39-cryptography +1 | 38.0.4-2.el8ap | RHSA-2023:4693 |
| Red Hat Ansible Automation Platform Developer 2 | python-cryptography +1 | 38.0.4-2.el9ap | RHSA-2023:4693 |
| Red Hat Ansible Automation Platform Developer 2 | python39-cryptography +1 | 38.0.4-2.el8ap | RHSA-2023:4693 |
| Red Hat Ansible Automation Platform 2 | automation-controller-venv-tower | 4.4.3-1.el8ap | RHSA-2023:4971 |
| Red Hat Ansible Automation Platform 2 | automation-eda-controller +2 | 1.0.1-1.el8ap | RHSA-2023:4693 |
| Red Hat Ansible Automation Platform 2 | python-cryptography +1 | 38.0.4-2.el9ap | RHSA-2023:4693 |
| Red Hat Ansible Automation Platform 2 | python-django +1 | 3.2.20-1.el9ap | RHSA-2023:4693 |
| Red Hat Ansible Automation Platform 2 | python-gitpython +1 | 3.1.32-1.el9ap | RHSA-2023:4971 |
| Red Hat Ansible Automation Platform 2 | python39-cryptography +1 | 38.0.4-2.el8ap | RHSA-2023:4693 |
| Red Hat Ansible Automation Platform 2 | python39-django +1 | 3.2.20-1.el8ap | RHSA-2023:4693 |
| Red Hat Ansible Automation Platform 2 | python39-gitpython +1 | 3.1.32-1.el8ap | RHSA-2023:4971 |
| Red Hat Ansible Automation Platform 2 | python39-requests +1 | 2.31.0-1.el8ap | RHSA-2023:4693 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | python3-cryptography | 36.0.1-4.el9 | ALSA-2023:6615 |
| AlmaLinux 8 | python3-cryptography | 3.2.1-6.el8 | ALSA-2023:7096 |
| AlmaLinux 8 | python39 +7 | 3.9.18-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:2985 |
| AlmaLinux 8 | python39-Cython | 0.29.21-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-PyMySQL | 0.10.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-attrs | 20.3.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-cffi | 1.14.3-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-chardet | 3.0.4-19.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-cryptography | 3.3.1-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:2985 |
| AlmaLinux 8 | python39-idna | 2.10-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-iniconfig | 1.1.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-lxml | 4.6.5-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-mod_wsgi | 4.7.1-7.module_el8.9.0+3634+fb2a896c | ALSA-2024:2985 |
| AlmaLinux 8 | python39-more-itertools | 8.5.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-numpy +2 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-packaging | 20.4-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-pip +1 | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2024:2985 |
| AlmaLinux 8 | python39-pluggy | 0.13.1-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-ply | 3.11-10.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-psutil | 5.8.0-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-psycopg2 +2 | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:2985 |
| AlmaLinux 8 | python39-py | 1.10.0-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-pybind11 +1 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-pycparser | 2.20-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-pyparsing | 2.4.7-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-pysocks | 1.7.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-pytest | 6.0.2-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-requests | 2.25.0-3.module_el8.9.0+3634+fb2a896c | ALSA-2024:2985 |
| AlmaLinux 8 | python39-scipy | 1.5.4-5.module_el8.9.0+3634+fb2a896c | ALSA-2024:2985 |
| AlmaLinux 8 | python39-setuptools +1 | 50.3.2-5.module_el8.10.0+3765+2f9a457d | ALSA-2024:2985 |
| AlmaLinux 8 | python39-six | 1.15.0-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-toml | 0.10.1-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-urllib3 | 1.25.10-5.module_el8.10.0+3765+2f9a457d | ALSA-2024:2985 |
| AlmaLinux 8 | python39-wcwidth | 0.2.5-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
| AlmaLinux 8 | python39-wheel +1 | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:2985 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | Cython | 0.29.21-5.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | PyYAML | 5.4.1-1.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | mod_wsgi | 4.7.1-7.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | numpy | 1.19.4-3.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | pybind11 | 2.7.1-1.module+el8.9.0+1357+a3b80af7 | RLSA-2024:2985 |
| Rocky Linux 8 | pytest | 6.0.2-2.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-PyMySQL | 0.10.1-2.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-attrs | 20.3.0-2.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-cffi | 1.14.3-2.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-chardet | 3.0.4-19.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-cryptography | 3.3.1-3.module+el8.10.0+1697+7e517775 | RLSA-2024:2985 |
| Rocky Linux 8 | python-iniconfig | 1.1.1-2.module+el8.9.0+1332+dd574197 | RLSA-2024:2985 |
| Rocky Linux 8 | python-lxml | 4.6.5-1.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-more-itertools | 8.5.0-2.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-packaging | 20.4-4.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-pluggy | 0.13.1-3.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-ply | 3.11-10.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-psutil | 5.8.0-4.module+el8.9.0+1357+a3b80af7 | RLSA-2024:2985 |
| Rocky Linux 8 | python-psycopg2 | 2.8.6-3.module+el8.10.0+1660+b5b6f004 | RLSA-2024:2985 |
| Rocky Linux 8 | python-py | 1.10.0-1.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-pycparser | 2.20-3.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-pysocks | 1.7.1-4.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-requests | 2.25.0-3.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-toml | 0.10.1-5.module+el8.9.0+1332+dd574197 | RLSA-2024:2985 |
| Rocky Linux 8 | python-urllib3 | 1.25.10-5.module+el8.10.0+1545+03246da9 | RLSA-2024:2985 |
| Rocky Linux 8 | python-wcwidth | 0.2.5-3.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python-wheel | 1:0.35.1-4.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python3x-pip | 20.2.4-9.module+el8.10.0+1721+e52d6351 | RLSA-2024:2985 |
| Rocky Linux 8 | python3x-pyparsing | 2.4.7-5.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python3x-setuptools | 50.3.2-5.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | python3x-six | 1.15.0-3.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
| Rocky Linux 8 | scipy | 1.5.4-5.module+el8.10.0+1582+bc278001 | RLSA-2024:2985 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | python-cryptography | 3.3.2-150400.16.6.1 | SUSE-SU-2023:0722-1 |
| SLES 15 SP1 | python-cryptography | 2.9.2-150100.7.12.1 | SUSE-SU-2023:0737-1 |
| SLES 12 SP5 | python-cffi | 1.11.5-5.19.1 | SUSE-SU-2023:0837-1 |
| SLES 12 SP5 | python-cryptography | 2.8-7.40.1 | SUSE-SU-2023:1767-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP1 | python-cryptography | 2.9.2-150100.7.12.1 | SUSE-SU-2023:0737-1 |
| SLES for SAP 12 SP5 | python-cffi | 1.11.5-5.19.1 | SUSE-SU-2023:0837-1 |
| SLES for SAP 12 SP5 | python-cryptography | 2.8-7.40.1 | SUSE-SU-2023:1767-1 |
| SLE Real Time 15 SP3 | python-cryptography | 3.3.2-150200.19.1 | SUSE-SU-2023:1763-1 |
| SLE Micro 5.4 | python-cryptography | 3.3.2-150400.16.6.1 | SUSE-SU-2023:0722-2 |
| SLE Micro 5.3 | python-cryptography | 3.3.2-150400.16.6.1 | SUSE-SU-2023:0722-1 |
| SLE Micro 5.2 | python-cryptography | 3.3.2-150200.19.1 | SUSE-SU-2023:1763-1 |
| SLE Micro 5.1 | python-cryptography | 3.3.2-150200.19.1 | SUSE-SU-2023:1763-1 |
| SLE HPC 15 SP1 | python-cryptography | 2.9.2-150100.7.12.1 | SUSE-SU-2023:0737-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-cffi | 1.11.5-3.3.1 | SUSE-SU-2023:0838-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-cryptography | 2.3.1-3.6.6 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-cffi | 1.10.0-4.3.1 | SUSE-SU-2023:0839-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-cryptography | 2.0.3-3.14.2 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 9 | python-cffi | 1.11.5-3.3.1 | SUSE-SU-2023:0838-1 |
| SUSE OpenStack Cloud 9 | python-cryptography | 2.3.1-3.6.6 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-barbican | 7.0.1~dev24-3.41.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-cinder | 13.0.10~dev24-3.42.3 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-designate | 7.0.2~dev2-3.39.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-glance | 17.0.1~dev30-3.37.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-heat | 11.0.4~dev4-3.41.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-horizon | 14.1.1~dev11-4.47.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-ironic | 11.1.5~dev18-4.37.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-keystone | 14.2.1~dev9-3.40.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-magnum | 7.2.1~dev1-4.39.3 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-manila | 7.4.2~dev60-3.45.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca | 2.7.1~dev10-3.41.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca-ceilometer | 1.8.2~dev3-3.39.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-neutron | 13.0.8~dev209-6.47.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-nova | 18.3.1~dev92-3.47.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-octavia | 3.2.3~dev7-4.39.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-sahara | 9.0.2~dev15-3.39.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-swift | 2.19.2~dev48-2.34.2 | SUSE-SU-2023:2218-1 |
| SUSE OpenStack Cloud 8 | python-cffi | 1.10.0-4.3.1 | SUSE-SU-2023:0839-1 |
| SUSE OpenStack Cloud 8 | python-cryptography | 2.0.3-3.14.2 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.44.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.47.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.42.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.46.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.43.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.40.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.43.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.49.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev6-14.52.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.45.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.49.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.44.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.49.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.49.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.40.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev3-12.42.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.50.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev92-11.48.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.45.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.44.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.35.1 | SUSE-SU-2023:2144-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.44.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | python-cffi | 1.10.0-4.3.1 | SUSE-SU-2023:0839-1 |
| SUSE HPE Helion OpenStack 8 | python-cryptography | 2.0.3-3.14.2 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.44.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.47.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.42.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.46.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.43.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.40.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.43.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.49.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev6-14.52.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.45.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.49.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.44.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.49.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.49.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.40.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev3-12.42.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.50.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev92-11.48.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.45.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.44.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.35.1 | SUSE-SU-2023:2144-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.44.1 | SUSE-SU-2023:2144-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python-cryptography | 39.0.1-1.1 | openSUSE-SU-2025:14739-1, openSUSE-SU-2024:12681-1 |
| openSUSE Tumbleweed | python-oci-sdk | 2.180.0-1.2 | openSUSE-SU-2026:12020-1 |
| openSUSE Leap 15.4 | python-cryptography | 3.3.2-150400.16.6.1 | SUSE-SU-2023:0722-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.3 | python-cryptography | 3.3.2-150400.16.6.1 | SUSE-SU-2023:0722-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | py3-cryptography | 39.0.1-r0 | — |
| Alpine v3.23 | py3-cryptography | 39.0.1-r0 | — |
| Alpine v3.22 | py3-cryptography | 39.0.1-r0 | — |
| Alpine v3.21 | py3-cryptography | 39.0.1-r0 | — |
| Alpine v3.20 | py3-cryptography | 39.0.1-r0 | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | py3-cryptography | 39.0.1-r0 | — |
| Alpine v3.18 | py3-cryptography | 39.0.1-r0 | — |
| Alpine v3.17 | py3-cryptography | 38.0.3-r1 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | python3-cryptography | 36.0.1-1.amzn2023.0.4 | ALAS2023-2023-459 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python-cryptography | 3.3.2-5 | — |
| Azure Linux 2 (CBL-Mariner) | python-cryptography | 3.3.2-4 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | python3-cryptography | 36.0.1-4.el9 | ELSA-2023-6615 |
| Oracle Linux 8 | python3-cryptography | 3.2.1-6.el8 | ELSA-2023-7096 |
| Oracle Linux 8 | python39 +7 | 3.9.18-3.module+el8.10.0+90269+2fa22b99 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-Cython | 0.29.21-5.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-PyMySQL | 0.10.1-2.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-attrs | 20.3.0-2.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-cffi | 1.14.3-2.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-chardet | 3.0.4-19.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-cryptography | 3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-idna | 2.10-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-iniconfig | 1.1.1-2.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-lxml | 4.6.5-1.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-mod_wsgi | 4.7.1-7.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-more-itertools | 8.5.0-2.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-numpy +2 | 1.19.4-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-packaging | 20.4-4.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-pip +1 | 20.2.4-9.module+el8.10.0+90269+2fa22b99 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-pluggy | 0.13.1-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-ply | 3.11-10.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-psutil | 5.8.0-4.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-psycopg2 +2 | 2.8.6-3.module+el8.10.0+90269+2fa22b99 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-py | 1.10.0-1.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-pybind11 +1 | 2.7.1-1.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-pycparser | 2.20-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-pyparsing | 2.4.7-5.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-pysocks | 1.7.1-4.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-pytest | 6.0.2-2.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-pyyaml | 5.4.1-1.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-requests | 2.25.0-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-scipy | 1.5.4-5.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-setuptools +1 | 50.3.2-5.module+el8.10.0+90269+2fa22b99 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-six | 1.15.0-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-toml | 0.10.1-5.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-urllib3 | 1.25.10-5.module+el8.10.0+90269+2fa22b99 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-wcwidth | 0.2.5-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
| Oracle Linux 8 | python39-wheel +1 | 1:0.35.1-4.module+el8.9.0+90016+9c2d6573 | ELSA-2024-2985 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | mitmproxy | 12.2.1-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | cryptography | >= 1.8, < 39.0.1 | 39.0.1 | GHSA-w7pp-m8wf-vj6r |
Advisories 43
- ALSA-2023:6615 Moderate: python-cryptography security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:2985 Moderate: python39:3.9 and python39-devel:3.9 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:7096 Moderate: python-cryptography security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2023-2031 Xerox FreeFlow Print Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- openSUSE-SU-2026:12020-1 python313-oci-sdk-2.180.0-1.2 on GA media SUSE / openSUSE Security Updates · Oct 5, 2026
- USN-8776-1 python-cryptography vulnerabilities Ubuntu Security Notices (USN) · Sep 17, 2026
- RHSA-2023:6793 Red Hat Security Advisory: rh-python38-python security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2023:4693 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- WID-SEC-2023-1793 Oracle PeopleSoft: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 16, 2026
- RHSA-2024:2985 Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2023:7096 Red Hat Security Advisory: python-cryptography security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2023:6615 Red Hat Security Advisory: python-cryptography security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2023:4971 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- WID-SEC-2023-2266 Red Hat Ansible Automation Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 2, 2026
- USN-6539-1 python-cryptography vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DLA-3331-2 python-cryptography - regression update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3331-1 python-cryptography - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3922-1 python-cryptography - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2024:2985 Moderate: python39:3.9 and python39-devel:3.9 security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2023:0722-2 Security update for python-cryptography SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:0839-1 Security update for python-cffi SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:0737-1 Security update for python-cryptography SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2218-1 Security update for python-cryptography SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:1763-1 Security update for python-cryptography SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2144-1 Security update for python-cryptography SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:0838-1 Security update for python-cffi SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:1767-1 Security update for python-cryptography SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:0837-1 Security update for python-cffi SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:0722-1 Security update for python-cryptography SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14739-1 python311-cryptography-44.0.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12681-1 python310-cryptography-39.0.1-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2024-1814 IBM App Connect Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 12, 2024
- ELSA-2024-2985 Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 24, 2024
- WID-SEC-2023-2922 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 21, 2024
- ICSA-24-046-11 Siemens SCALANCE XCM-/XRM-300 CISA ICS & IT advisories · Feb 13, 2024
- SSA-806742 SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4 Siemens ProductCERT · Feb 13, 2024
- ALAS2023-2023-459 Moderate: python-cryptography security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Dec 14, 2023
- ELSA-2023-7096 Moderate: python-cryptography security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 17, 2023
- ELSA-2023-6615 Moderate: python-cryptography security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 11, 2023
- WID-SEC-2023-2679 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 17, 2023
- WID-SEC-2023-1812 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 20, 2023
- WID-SEC-2023-1818 Oracle Database Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 18, 2023
- WID-SEC-2023-1021 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 29, 2023