rpm package
almalinux/python3-cryptography
pkg:rpm/almalinux/python3-cryptography
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-69249 | Hig | — | < 43.0.0-4.el10_2.5 | 43.0.0-4.el10_2.5 | Aug 3, 2026 | python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invoke | |
| CVE-2023-49083 | Med | 5.9 | < 3.2.1-8.el8_10 | 3.2.1-8.el8_10 | Nov 29, 2023 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious | |
| CVE-2023-23931 | Med | 4.8 | < 36.0.1-4.el9 | 36.0.1-4.el9 | Feb 7, 2023 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable object |
- affected < 43.0.0-4.el10_2.5fixed 43.0.0-4.el10_2.5
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invoke
- affected < 3.2.1-8.el8_10fixed 3.2.1-8.el8_10
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious
- affected < 36.0.1-4.el9fixed 36.0.1-4.el9
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable object