[El-errata] ELSA-2024-12079 Important: Oracle Linux 9 python-cryptography security update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Tue Jan 23 16:34:35 UTC 2024
Oracle Linux Security Advisory ELSA-2024-12079
http://linux.oracle.com/errata/ELSA-2024-12079.html
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
x86_64:
python3-cryptography-36.0.1-4.0.1.el9.x86_64.rpm
aarch64:
python3-cryptography-36.0.1-4.0.1.el9.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//python-cryptography-36.0.1-4.0.1.el9.src.rpm
Related CVEs:
CVE-2023-49083
Description of changes:
[36.0.1-4.0.1]
- Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates [Orabug: 36119159]
[36.0.1-4]
- Fix FTBFS caused by rsa_pkcs1_implicit_rejection OpenSSL feature, resolves rhbz#2203840
[36.0.1-3]
- Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
- Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt
More information about the El-errata
mailing list