SUSE-SU-2025:01662-1

Опубликовано: 22 мая 2025

Источник: suse-cvrf

Описание

Security update for python-cryptography

This update for python-cryptography fixes the following issues:

CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some(...) value passed as properties argument to either function (bsc#1242631).

Список пакетов

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest

python311-cryptography-41.0.3-150600.23.6.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-Azure-3P

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-Azure-Basic

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-Azure-Standard

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-BYOS

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-CHOST-BYOS

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-CHOST-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-CHOST-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-CHOST-BYOS-GDC

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-EC2-ECS-HVM

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-HPC

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-HPC-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-HPC-BYOS

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-HPC-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-HPC-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-HPC-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-Hardened-BYOS

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-Hardened-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-Hardened-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-Azure-3P

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-BYOS

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-Hardened

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-Hardened-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-Hardened-BYOS

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAP-Hardened-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAPCAL

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAPCAL-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-SAPCAL-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-Azure-3P

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-Azure-Basic

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-Azure-Standard

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-BYOS-GCE

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-CHOST-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-CHOST-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-CHOST-BYOS-GDC

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-EC2-ECS-HVM

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-HPC-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-HPC-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-HPC-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-HPC-BYOS-GCE

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-Hardened-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-Hardened-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-Hardened-BYOS-GCE

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAP-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAP-Azure-3P

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAP-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAP-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAP-BYOS-GCE

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAP-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAP-Hardened-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAPCAL-Azure

python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP7-SAPCAL-EC2

python311-cryptography-41.0.3-150600.23.6.1

Image proxy-salt-broker-image

python311-cryptography-41.0.3-150600.23.6.1

Image server-image

python311-cryptography-41.0.3-150600.23.6.1

Image server-image-sles15sp7

python311-cryptography-41.0.3-150600.23.6.1

SUSE Linux Enterprise Module for Python 3 15 SP6

python311-cryptography-41.0.3-150600.23.6.1

openSUSE Leap 15.6

python311-cryptography-41.0.3-150600.23.6.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-202501662-1/
Link for SUSE-SU-2025:01662-1
https://lists.suse.com/pipermail/sle-updates/2025-May/039316.html
E-Mail link for SUSE-SU-2025:01662-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1242631
SUSE Bug 1242631
https://www.suse.com/security/cve/CVE-2025-3416/
SUSE CVE CVE-2025-3416 page

Описание

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

Затронутые продукты

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest:python311-cryptography-41.0.3-150600.23.6.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest:python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-Azure-3P:python311-cryptography-41.0.3-150600.23.6.1

Image SLES15-SP6-Azure-Basic:python311-cryptography-41.0.3-150600.23.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-3416.html
CVE-2025-3416
https://bugzilla.suse.com/1242599
SUSE Bug 1242599