Security update for python-cryptography SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:2138-1 Final 1 1 2024-06-21T11:08:21Z current 2024-06-21T11:08:21Z 2024-06-21T11:08:21Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python-cryptography This update for python-cryptography fixes the following issues: - CVE-2024-26130: Fix a NULL pointer dereference in pkcs12.serialize_key_and_certificates(). (bsc#1220210) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP6-Azure-Basic-2024-2138,Image SLES15-SP6-Azure-Standard-2024-2138,Image SLES15-SP6-BYOS-Azure-2024-2138,Image SLES15-SP6-BYOS-EC2-2024-2138,Image SLES15-SP6-EC2-2024-2138,Image SLES15-SP6-EC2-ECS-HVM-2024-2138,Image SLES15-SP6-HPC-2024-2138,Image SLES15-SP6-HPC-Azure-2024-2138,Image SLES15-SP6-HPC-BYOS-2024-2138,Image SLES15-SP6-HPC-BYOS-Azure-2024-2138,Image SLES15-SP6-HPC-BYOS-EC2-2024-2138,Image SLES15-SP6-HPC-EC2-2024-2138,Image SLES15-SP6-Hardened-BYOS-Azure-2024-2138,Image SLES15-SP6-Hardened-BYOS-EC2-2024-2138,Image SLES15-SP6-SAP-2024-2138,Image SLES15-SP6-SAP-Azure-2024-2138,Image SLES15-SP6-SAP-BYOS-Azure-2024-2138,Image SLES15-SP6-SAP-BYOS-EC2-2024-2138,Image SLES15-SP6-SAP-EC2-2024-2138,Image SLES15-SP6-SAP-Hardened-2024-2138,Image SLES15-SP6-SAP-Hardened-Azure-2024-2138,Image SLES15-SP6-SAP-Hardened-BYOS-2024-2138,Image SLES15-SP6-SAP-Hardened-BYOS-Azure-2024-2138,Image SLES15-SP6-SAP-Hardened-BYOS-EC2-2024-2138,Image SLES15-SP6-SAP-Hardened-EC2-2024-2138,Image SLES15-SP6-SAPCAL-2024-2138,Image SLES15-SP6-SAPCAL-Azure-2024-2138,Image SLES15-SP6-SAPCAL-EC2-2024-2138,SUSE-2024-2138,SUSE-SLE-Module-Python3-15-SP6-2024-2138,openSUSE-SLE-15.6-2024-2138 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20242138-1/ Link for SUSE-SU-2024:2138-1 https://lists.suse.com/pipermail/sle-updates/2024-June/035679.html E-Mail link for SUSE-SU-2024:2138-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1220210 SUSE Bug 1220210 https://www.suse.com/security/cve/CVE-2024-26130/ SUSE CVE CVE-2024-26130 page Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-SAP Image SLES15-SP6-SAP-Azure Image SLES15-SP6-SAP-BYOS-Azure Image SLES15-SP6-SAP-BYOS-EC2 Image SLES15-SP6-SAP-EC2 Image SLES15-SP6-SAP-Hardened Image SLES15-SP6-SAP-Hardened-Azure Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP6-SAP-Hardened-BYOS-Azure Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-EC2 Image SLES15-SP6-SAPCAL Image SLES15-SP6-SAPCAL-Azure Image SLES15-SP6-SAPCAL-EC2 SUSE Linux Enterprise Module for Python 3 15 SP6 openSUSE Leap 15.6 python311-cryptography-41.0.3-150600.23.3.1 python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-Azure-Basic python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-Azure-Standard python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-BYOS-Azure python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-BYOS-EC2 python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-EC2 python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-EC2-ECS-HVM python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-HPC python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-HPC-Azure python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-HPC-BYOS python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-HPC-BYOS-Azure python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-HPC-BYOS-EC2 python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-HPC-EC2 python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-Hardened-BYOS-Azure python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-Hardened-BYOS-EC2 python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP-Azure python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP-BYOS-Azure python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP-BYOS-EC2 python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP-EC2 python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP-Hardened python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP-Hardened-Azure python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS-Azure python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS-EC2 python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAP-Hardened-EC2 python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAPCAL python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAPCAL-Azure python311-cryptography-41.0.3-150600.23.3.1 as a component of Image SLES15-SP6-SAPCAL-EC2 python311-cryptography-41.0.3-150600.23.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-cryptography-41.0.3-150600.23.3.1 as a component of openSUSE Leap 15.6 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did not match the provided private key and an `encryption_algorithm` with `hmac_hash` set (via `PrivateFormat.PKCS12.encryption_builder().hmac_hash(...)`, then a NULL pointer dereference would occur, crashing the Python process. This has been resolved in version 42.0.4, the first version in which a `ValueError` is properly raised. CVE-2024-26130 Image SLES15-SP6-Azure-Basic:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-Azure-Standard:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-BYOS-Azure:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-BYOS-EC2:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-EC2-ECS-HVM:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-EC2:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-HPC-Azure:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-HPC-BYOS-Azure:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-HPC-BYOS-EC2:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-HPC-BYOS:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-HPC-EC2:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-HPC:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-Hardened-BYOS-Azure:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-Hardened-BYOS-EC2:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP-Azure:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP-BYOS-Azure:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP-BYOS-EC2:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP-EC2:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP-Hardened-Azure:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP-Hardened-BYOS-Azure:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP-Hardened-BYOS-EC2:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP-Hardened-BYOS:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP-Hardened-EC2:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP-Hardened:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAP:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAPCAL-Azure:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAPCAL-EC2:python311-cryptography-41.0.3-150600.23.3.1 Image SLES15-SP6-SAPCAL:python311-cryptography-41.0.3-150600.23.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-cryptography-41.0.3-150600.23.3.1 openSUSE Leap 15.6:python311-cryptography-41.0.3-150600.23.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242138-1/ https://www.suse.com/security/cve/CVE-2024-26130.html CVE-2024-26130 https://bugzilla.suse.com/1220210 SUSE Bug 1220210