p PatchFirst

PatchFirst · Latest vulnerabilities

python-cryptography vulnerabilities

Vulnerabilities published for python-cryptography in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. SUSE-SU-2026:3040-1

    Not ratedFix available

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270208). - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270620). - CVE-2026-41678: openssl: out-of-bounds write due to incorrect bounds assertion in `aes::unwrap_key()` (bsc#1270706). - CVE-2026-41681: openssl: `MdCtxRef::digest_final()` writes past caller buffer with no length check (bsc#1270772). - CVE-2026-41898: openssl: unchecked callback-returned length in PSK and cookie generate trampolin

    • Update to 41.0.3-150400.16.25.1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →