Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:01662-1

Опубликовано: 22 мая 2025
Источник: suse-cvrf

Описание

Security update for python-cryptography

This update for python-cryptography fixes the following issues:

  • CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some(...) value passed as properties argument to either function (bsc#1242631).

Список пакетов

SUSE Linux Enterprise Module for Python 3 15 SP6
python311-cryptography-41.0.3-150600.23.6.1
openSUSE Leap 15.6
python311-cryptography-41.0.3-150600.23.6.1

Ссылки

Описание

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

Затронутые продукты
SUSE Linux Enterprise Module for Python 3 15 SP6:python311-cryptography-41.0.3-150600.23.6.1
openSUSE Leap 15.6:python311-cryptography-41.0.3-150600.23.6.1
Ссылки