SUSE-SU-2024:2138-1

Опубликовано: 21 июн. 2024

Источник: suse-cvrf

Описание

Security update for python-cryptography

This update for python-cryptography fixes the following issues:

CVE-2024-26130: Fix a NULL pointer dereference in pkcs12.serialize_key_and_certificates(). (bsc#1220210)

Список пакетов

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest

python311-cryptography-41.0.3-150600.23.3.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-Azure-3P

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-Azure-Basic

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-Azure-Standard

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-BYOS

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-CHOST-BYOS

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-CHOST-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-CHOST-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-CHOST-BYOS-GDC

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-EC2-ECS-HVM

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-HPC

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-HPC-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-HPC-BYOS

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-HPC-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-HPC-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-HPC-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-Hardened-BYOS

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-Hardened-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-Hardened-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-Azure-3P

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-BYOS

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-Hardened

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-Hardened-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-Hardened-BYOS

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAP-Hardened-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAPCAL

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAPCAL-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-SAPCAL-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-Azure-3P

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-Azure-Basic

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-Azure-Standard

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-BYOS-GCE

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-CHOST-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-CHOST-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-CHOST-BYOS-GDC

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-EC2-ECS-HVM

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-HPC-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-HPC-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-HPC-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-HPC-BYOS-GCE

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-Hardened-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-Hardened-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-Hardened-BYOS-GCE

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAP-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAP-Azure-3P

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAP-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAP-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAP-BYOS-GCE

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAP-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAP-Hardened-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAPCAL-Azure

python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP7-SAPCAL-EC2

python311-cryptography-41.0.3-150600.23.3.1

Image proxy-salt-broker-image

python311-cryptography-41.0.3-150600.23.3.1

Image server-image

python311-cryptography-41.0.3-150600.23.3.1

Image server-image-sles15sp7

python311-cryptography-41.0.3-150600.23.3.1

SUSE Linux Enterprise Module for Python 3 15 SP6

python311-cryptography-41.0.3-150600.23.3.1

openSUSE Leap 15.6

python311-cryptography-41.0.3-150600.23.3.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20242138-1/
Link for SUSE-SU-2024:2138-1
https://lists.suse.com/pipermail/sle-updates/2024-June/035679.html
E-Mail link for SUSE-SU-2024:2138-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1220210
SUSE Bug 1220210
https://www.suse.com/security/cve/CVE-2024-26130/
SUSE CVE CVE-2024-26130 page

Описание

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did not match the provided private key and an `encryption_algorithm` with `hmac_hash` set (via `PrivateFormat.PKCS12.encryption_builder().hmac_hash(...)`, then a NULL pointer dereference would occur, crashing the Python process. This has been resolved in version 42.0.4, the first version in which a `ValueError` is properly raised.

Затронутые продукты

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest:python311-cryptography-41.0.3-150600.23.3.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest:python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-Azure-3P:python311-cryptography-41.0.3-150600.23.3.1

Image SLES15-SP6-Azure-Basic:python311-cryptography-41.0.3-150600.23.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-26130.html
CVE-2024-26130
https://bugzilla.suse.com/1220210
SUSE Bug 1220210