Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:01818-1

Опубликовано: 05 июн. 2025
Источник: suse-cvrf

Описание

Security update for python-cryptography

This update for python-cryptography fixes the following issues:

  • CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some(...) value passed as properties argument to either function (bsc#1242631).

Список пакетов

SUSE Linux Enterprise Module for Public Cloud 15 SP4
python311-cryptography-41.0.3-150400.16.22.1

Ссылки

Описание

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 15 SP4:python311-cryptography-41.0.3-150400.16.22.1
Ссылки