NULL pointer dereference in cryptography - CVE-2023-49083

Vulnerability identifier: #VU83930

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-49083

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error when calling the load_pem_pkcs7_certificates() or load_der_pkcs7_certificates() functions. A remote attacker can pass specially crafted PKCS7 blob/certificate certificate to the application and perform a denial of service (DoS) attack.

cryptography
Cloud Pak for Security (CP4S)
IBM Qradar SIEM
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Public Cloud Module
Basesystem Module
Python 3 Module
openSUSE Leap
openEuler
Ubuntu
Fedora
Oracle Solaris
SmartFabric Storage Software
PowerScale OneFS
Junos cRPD
QRadar Suite
PowerVC
Oracle Communications Diameter Signaling Router
Oracle Communications Cloud Native Core Network Repository Function
Oracle Communications Cloud Native Core Network Data Analytics Function
IBM Process Mining
Red Hat Update Infrastructure (RHUI)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Maximo Application Suite
IBM Spectrum Protect Plus
PowerProtect Data Manager
IBM Cloud Pak for Business Automation
Juniper Cloud Native Router
QRadar App SDK
Oracle Communications Operations Monitor
Oracle Business Intelligence Enterprise Edition
Oracle Communications User Data Repository
Storage Sentinel Anomaly Scan Engine
ObjectScale
Netezza Performance Server Replication Services
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
Storage Ceph
Maximo Application Suite - Edge Data Collector
IBM Netezza for Cloud Pak for Data
IBM Cloud Pak for Multicloud Management
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libcomps (Red Hat package)
python-sqlparse (Red Hat package)
python-json-stream-rs-tokenizer (Red Hat package)
python3x-sqlparse (Red Hat package)
python-gnupg (Red Hat package)
python-inflection (Red Hat package)
python-defusedxml (Red Hat package)
libsolv (Red Hat package)
python-ecdsa (Red Hat package)
python-pyrsistent (Red Hat package)
python-future (Red Hat package)
python3x-pulp-ansible (Red Hat package)
python-pulp-ansible (Red Hat package)
python-pulp-glue (Red Hat package)
python-drf-spectacular (Red Hat package)
python-drf-nested-routers (Red Hat package)
python-django-lifecycle (Red Hat package)
python-djangorestframework-queryfields (Red Hat package)
createrepo_c (Red Hat package)
python-asyncio-throttle (Red Hat package)
automation-eda-controller (Red Hat package)
ansible-rulebook (Red Hat package)
python-brotli (Red Hat package)
python-et-xmlfile (Red Hat package)
python-django-readonly-field (Red Hat package)
python-deprecated (Red Hat package)
python-drf-access-policy (Red Hat package)
python-xlwt (Red Hat package)
python-aiosignal (Red Hat package)
python-frozenlist (Red Hat package)
python-odfpy (Red Hat package)
python-pyjwkest (Red Hat package)
python-url-normalize (Red Hat package)
receptor (Red Hat package)
python-aiohttp-xmlrpc (Red Hat package)
python-jq (Red Hat package)
python-yarl (Red Hat package)
python3x-pydantic (Red Hat package)
python-pydantic (Red Hat package)
python-wrapt (Red Hat package)
python-markuppy (Red Hat package)
python-opentelemetry_exporter_otlp_proto_common (Red Hat package)
python-opentelemetry_api (Red Hat package)
python-opentelemetry_proto (Red Hat package)
python-opentelemetry_sdk (Red Hat package)
python-opentelemetry_exporter_otlp (Red Hat package)
python-opentelemetry_exporter_otlp_proto_http (Red Hat package)
python-opentelemetry_exporter_otlp_proto_grpc (Red Hat package)
python-productmd (Red Hat package)
python-grpcio (Red Hat package)
python-googleapis-common-protos (Red Hat package)
pulpcore-selinux (Red Hat package)
python-urlman (Red Hat package)
python-aioredis (Red Hat package)
python-xlrd (Red Hat package)
python-markupsafe (Red Hat package)
python-backoff (Red Hat package)
python-json-stream (Red Hat package)
ansible-runner (Red Hat package)
ansible-automation-platform-installer (Red Hat package)
python-pygtrie (Red Hat package)
python-pyjwt (Red Hat package)
python3-cryptography (Ubuntu package)
python-cryptography (Ubuntu package)
ansible-core (Red Hat package)
python-pulp-container (Red Hat package)
python-pulp-container-client (Red Hat package)
ansible-collection-community-crypto (Red Hat package)
python3x-requests (Red Hat package)
python-requests (Red Hat package)
python-aiodns (Red Hat package)
python-django-import-export (Red Hat package)
python-openpyxl (Red Hat package)
python-pyparsing (Red Hat package)
python-jinja2 (Red Hat package)
python3x-jinja2 (Red Hat package)
python-psycopg (Red Hat package)
python-dynaconf (Red Hat package)
python-cryptography (Red Hat package)
python3-cryptography
python-tablib (Red Hat package)
python-django-guid (Red Hat package)
python-cryptography
python-cryptography-debuginfo
python-cryptography-debugsource
python2-cryptography
python-cryptography-help
python3-cryptography-debuginfo
python2-cryptography-debuginfo
python3-cryptography-debugsource
python-types-cryptography (Red Hat package)
python-zipp (Red Hat package)
python-asgiref (Red Hat package)
python3x-idna (Red Hat package)
python-idna (Red Hat package)
python-aiohttp (Red Hat package)
python3x-aiohttp (Red Hat package)
python-djangorestframework (Red Hat package)
python-pycryptodomex (Red Hat package)
python-pulp-rpm (Red Hat package)
python-pulp-rpm-client (Red Hat package)
python3x-pulpcore (Red Hat package)
python-pulpcore (Red Hat package)
python-pulpcore-client (Red Hat package)
python-async-timeout (Red Hat package)
python-uritemplate (Red Hat package)
python-pycares (Red Hat package)
python3x-django (Red Hat package)
python-django (Red Hat package)
python-redis (Red Hat package)
automation-controller (Red Hat package)
python-typing-extensions (Red Hat package)
rhui-tools (Red Hat package)
rhui-installer (Red Hat package)
automation-hub (Red Hat package)
python3x-galaxy-ng (Red Hat package)
python-galaxy-ng (Red Hat package)
python-jsonschema (Red Hat package)
python-protobuf (Red Hat package)
python3x-social-auth-app-django (Red Hat package)
python-social-auth-app-django (Red Hat package)
python-whitenoise (Red Hat package)
python-importlib-metadata (Red Hat package)
python-multidict (Red Hat package)
python-click (Red Hat package)
python3x-pillow (Red Hat package)
python-pillow (Red Hat package)
python-gunicorn (Red Hat package)
python-packaging (Red Hat package)
python-attrs (Red Hat package)
python3x-gunicorn (Red Hat package)
python-aiofiles (Red Hat package)
python3x-black (Red Hat package)
python-black (Red Hat package)
python-django-filter (Red Hat package)
python3x-pyOpenSSL (Red Hat package)
python-pyOpenSSL (Red Hat package)
python3.11-cryptography (Red Hat package)
python3-cryptography-doc
python311-cryptography
python311-cryptography-debuginfo
dev-python/cryptography
python3x-cryptography (Red Hat package)
python-pytz (Red Hat package)
python-uuid6 (Red Hat package)
python-diff-match-patch (Red Hat package)
Oracle Communications Cloud Native Core Unified Data Repository
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Planning Analytics Local

Install updates from vendor's website.

cryptography - update to 41.0.6
SmartFabric Storage Software - update to 1.4.3
QRadar Suite - update to 1.10.20.0
PowerVC - addressed in versions 2.2.1.2, 2.3.0
QRadar App SDK - update to 2.2.1
IBM Cloud Pak for Multicloud Management - update to 2.3.8
libcomps (Red Hat package) - update to 0.1.18-8.el8ui
python-sqlparse (Red Hat package) - addressed in versions 0.4.4-3.el8ui, 0.5.0-1.el9ap
python-json-stream-rs-tokenizer (Red Hat package) - update to 0.4.25-3.el8ui
python3x-sqlparse (Red Hat package) - update to 0.5.0-1.el8ap
python-gnupg (Red Hat package) - update to 0.5.0-4.el8ui
python-inflection (Red Hat package) - update to 0.5.1-6.el8ui
python-defusedxml (Red Hat package) - update to 0.7.1-6.el8ui
libsolv (Red Hat package) - update to 0.7.22-6.el8ui
python-ecdsa (Red Hat package) - update to 0.18.0-4.el8ui
python-pyrsistent (Red Hat package) - update to 0.18.1-5.el8ui
python-future (Red Hat package) - update to 0.18.3-4.el8ui
python3x-pulp-ansible (Red Hat package) - update to 0.20.7-1.el8ap
python-pulp-ansible (Red Hat package) - update to 0.20.7-1.el9ap
python-pulp-glue (Red Hat package) - update to 0.21.2-3.el8ui
python-drf-spectacular (Red Hat package) - update to 0.26.5-4.el8ui
python-drf-nested-routers (Red Hat package) - update to 0.93.4-5.el8ui
python-django-lifecycle (Red Hat package) - update to 1.0.0-3.el8ui
python-djangorestframework-queryfields (Red Hat package) - update to 1.0.0-7.el8ui
createrepo_c (Red Hat package) - update to 1.0.2-5.el8ui
python-asyncio-throttle (Red Hat package) - update to 1.0.2-6.el8ui
automation-eda-controller (Red Hat package) - addressed in versions 1.0.7-1.el8ap, 1.0.7-1.el9ap
ansible-rulebook (Red Hat package) - addressed in versions 1.0.7-1.el8ap, 1.0.7-1.el9ap
python-brotli (Red Hat package) - update to 1.0.9-5.el8ui
python-et-xmlfile (Red Hat package) - update to 1.1.0-5.el8ui
python-django-readonly-field (Red Hat package) - update to 1.1.2-3.el8ui
Storage Sentinel Anomaly Scan Engine - update to 1.1.7
python-deprecated (Red Hat package) - update to 1.2.13-4.el8ui
python-drf-access-policy (Red Hat package) - update to 1.3.0-3.el8ui
python-xlwt (Red Hat package) - update to 1.3.0-6.el8ui
python-aiosignal (Red Hat package) - update to 1.3.1-4.el8ui
python-frozenlist (Red Hat package) - update to 1.3.3-4.el8ui
ObjectScale - update to 1.4.0
python-odfpy (Red Hat package) - update to 1.4.1-9.el8ui
python-pyjwkest (Red Hat package) - update to 1.4.2-8.el8ui
python-url-normalize (Red Hat package) - update to 1.4.3-7.el8ui
receptor (Red Hat package) - addressed in versions 1.4.5-1.el8ap, 1.4.5-1.el9ap, 1.4.8-1.el8ap, 1.4.8-1.el9ap
python-aiohttp-xmlrpc (Red Hat package) - update to 1.5.0-5.el8ui
python-jq (Red Hat package) - update to 1.6.0-3.el8ui
python-yarl (Red Hat package) - update to 1.8.2-4.el8ui
python3x-pydantic (Red Hat package) - update to 1.10.15-1.el8ap
python-pydantic (Red Hat package) - update to 1.10.15-1.el9ap
python-wrapt (Red Hat package) - update to 1.14.1-4.el8ui
IBM Process Mining - update to 1.14.3
python-markuppy (Red Hat package) - update to 1.14-6.el8ui
python-opentelemetry_exporter_otlp_proto_common (Red Hat package) - update to 1.19.0-3.el8ui
python-opentelemetry_api (Red Hat package) - update to 1.19.0-3.el8ui
python-opentelemetry_proto (Red Hat package) - update to 1.19.0-4.el8ui
python-opentelemetry_sdk (Red Hat package) - update to 1.19.0-4.el8ui
python-opentelemetry_exporter_otlp (Red Hat package) - update to 1.19.0-4.el8ui
python-opentelemetry_exporter_otlp_proto_http (Red Hat package) - update to 1.19.0-5.el8ui
python-opentelemetry_exporter_otlp_proto_grpc (Red Hat package) - update to 1.19.0-5.el8ui
python-productmd (Red Hat package) - update to 1.33-6.el8ui
python-grpcio (Red Hat package) - update to 1.56.0-4.el8ui
python-googleapis-common-protos (Red Hat package) - update to 1.59.1-4.el8ui
Planning Analytics Local - addressed in versions 2.0.0.96, 2.1.3
pulpcore-selinux (Red Hat package) - update to 2.0.1-1.el8ui
python-urlman (Red Hat package) - update to 2.0.1-4.el8ui
python-aioredis (Red Hat package) - update to 2.0.1-5.el8ui
python-xlrd (Red Hat package) - update to 2.0.1-8.el8ui
python-markupsafe (Red Hat package) - update to 2.1.2-4.el8ui
python-backoff (Red Hat package) - update to 2.2.1-4.el8ui
python-json-stream (Red Hat package) - update to 2.3.2-4.el8ui
ansible-runner (Red Hat package) - addressed in versions 2.3.6-1.el8ap, 2.3.6-1.el9ap
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.4-7.1.el8ap, 2.4-7.1.el9ap
python-pygtrie (Red Hat package) - update to 2.5.0-4.el8ui
python-pyjwt (Red Hat package) - update to 2.5.0-4.el8ui
python3-cryptography (Ubuntu package) - addressed in versions 2.8-3ubuntu0.2, 3.4.8-1ubuntu2.1, 38.0.4-2ubuntu0.1, 38.0.4-4ubuntu0.23.10.1
python-cryptography (Ubuntu package) - update to 2.8-3ubuntu0.2
ansible-core (Red Hat package) - addressed in versions 2.15.10-1.el8ap, 2.15.10-1.el9ap, 2.15.11-1.el8ap, 2.15.11-1.el9ap
python-pulp-container (Red Hat package) - update to 2.16.4-1.el8ui
python-pulp-container-client (Red Hat package) - update to 2.16.4-1.0.1.el8ui
ansible-collection-community-crypto (Red Hat package) - update to 2.18.0-1.el8ui
python3x-requests (Red Hat package) - update to 2.32.2-1.el8ap
python-requests (Red Hat package) - update to 2.32.2-1.el9ap
python-aiodns (Red Hat package) - update to 3.0.0-6.el8ui
Netezza Performance Server Replication Services - update to 3.0.5.1
python-django-import-export (Red Hat package) - update to 3.1.0-3.el8ui
python-openpyxl (Red Hat package) - update to 3.1.0-4.el8ui
python-pyparsing (Red Hat package) - update to 3.1.1-3.el8ui
python-jinja2 (Red Hat package) - addressed in versions 3.1.3-1.el8ui, 3.1.4-1.el9ap
python3x-jinja2 (Red Hat package) - update to 3.1.4-1.el8ap
python-psycopg (Red Hat package) - update to 3.1.9-4.el8ui
python-dynaconf (Red Hat package) - update to 3.1.12-3.el8ui
python-cryptography (Red Hat package) - addressed in versions 3.2.1-4.el8_4.1, 3.2.1-5.1.el8_6.1, 3.2.1-6.el8_8, 3.2.1-8.el8_10, 36.0.1-1.el9_0.1, 36.0.1-2.el9_2.1, 36.0.1-4.el9_4.1, 36.0.1-5.el9_6, 41.0.6-1.el8ui, 42.0.5-1.el9ap
python3-cryptography - addressed in versions 3.2.1-8, 39.0.0-4
python-tablib (Red Hat package) - update to 3.3.0-4.el8ui
python-django-guid (Red Hat package) - update to 3.3.0-4.el8ui
python-cryptography - update to 3.3.1-5
python-cryptography-debuginfo - update to 3.3.1-5
python3-cryptography - update to 3.3.1-5
python-cryptography-debugsource - update to 3.3.1-5
python2-cryptography - update to 3.3.1-5
python-cryptography-help - update to 3.3.1-5
python-cryptography-debuginfo - addressed in versions 3.3.2-150100.7.18.1, 3.3.2-150200.22.1
python3-cryptography - addressed in versions 3.3.2-150100.7.18.1, 3.3.2-150200.22.1, 3.3.2-150400.23.1
python3-cryptography-debuginfo - addressed in versions 3.3.2-150100.7.18.1, 3.3.2-150200.22.1, 3.3.2-150400.23.1
python2-cryptography - update to 3.3.2-150100.7.18.1
python-cryptography-debugsource - addressed in versions 3.3.2-150100.7.18.1, 3.3.2-150200.22.1, 41.0.3-150400.16.12.1
python2-cryptography-debuginfo - update to 3.3.2-150100.7.18.1
python3-cryptography-debugsource - update to 3.3.2-150400.23.1
python-types-cryptography (Red Hat package) - update to 3.3.23.2-4.el8ui
python-zipp (Red Hat package) - update to 3.4.0-7.el8ui
python-asgiref (Red Hat package) - update to 3.6.0-4.el8ui
python3x-idna (Red Hat package) - update to 3.7-1.el8ap
python-idna (Red Hat package) - update to 3.7-1.el9ap
python-aiohttp (Red Hat package) - addressed in versions 3.9.2-1.el8ui, 3.9.3-1.el9ap, 3.9.5-1.el9ap
python3x-aiohttp (Red Hat package) - addressed in versions 3.9.3-1.el8ap, 3.9.5-1.el8ap
python-djangorestframework (Red Hat package) - update to 3.14.0-3.el8ui
python-pycryptodomex (Red Hat package) - update to 3.14.1-5.el8ui
python-pulp-rpm (Red Hat package) - update to 3.23.0-2.el8ui
python-pulp-rpm-client (Red Hat package) - update to 3.23.0-2.0.1.el8ui
python3x-pulpcore (Red Hat package) - addressed in versions 3.28.24-1.el8ap, 3.28.27-1.el8ap
python-pulpcore (Red Hat package) - addressed in versions 3.28.24-1.el9ap, 3.28.27-1.el9ap, 3.39.11-1.el8ui
python-pulpcore-client (Red Hat package) - update to 3.39.7-1.0.1.el8ui
python-async-timeout (Red Hat package) - update to 4.0.2-5.el8ui
python-uritemplate (Red Hat package) - update to 4.1.1-5.el8ui
python-pycares (Red Hat package) - update to 4.1.2-5.el8ui
python3x-django (Red Hat package) - update to 4.2.11-1.el8ap
python-django (Red Hat package) - addressed in versions 4.2.11-1.el9ap, 4.2.11-1.el8ui
python-redis (Red Hat package) - update to 4.3.4-4.el8ui
automation-controller (Red Hat package) - addressed in versions 4.5.5-2.el8ap, 4.5.5-2.el9ap, 4.5.7-1.el8ap, 4.5.7-1.el9ap
python-typing-extensions (Red Hat package) - update to 4.7.1-4.el8ui
Red Hat Update Infrastructure (RHUI) - update to 4.8.0
rhui-tools (Red Hat package) - update to 4.8.0.1-1.el8ui
rhui-installer (Red Hat package) - update to 4.8.0.2-1.el8ui
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.5
DB2 Warehouse on Cloud Pak for Data - update to 4.8.5
DB2 on Cloud Pak for Data - update to 4.8.5
automation-hub (Red Hat package) - addressed in versions 4.9.2-1.el8ap, 4.9.2-1.el9ap
python3x-galaxy-ng (Red Hat package) - update to 4.9.2-1.el8ap
python-galaxy-ng (Red Hat package) - update to 4.9.2-1.el9ap
python-jsonschema (Red Hat package) - update to 4.10.3-3.el8ui
Red Hat OpenShift Container Platform - addressed in versions 4.16.46, 4.18.22
python-protobuf (Red Hat package) - update to 4.21.6-4.el8ui
python3x-social-auth-app-django (Red Hat package) - update to 5.4.1-1.el8ap
python-social-auth-app-django (Red Hat package) - update to 5.4.1-1.el9ap
python-whitenoise (Red Hat package) - update to 6.0.0-4.el8ui
python-importlib-metadata (Red Hat package) - update to 6.0.1-4.el8ui
python-multidict (Red Hat package) - update to 6.0.4-4.el8ui
Storage Ceph - update to 7.1
IBM Qradar SIEM - update to 7.5.0 Update Pack 10 IF01
python-click (Red Hat package) - update to 8.1.3-4.el8ui
IBM Maximo Application Suite - addressed in versions 8.10.10, 8.11.7
Maximo Application Suite - Edge Data Collector - update to 8.11.4
PowerScale OneFS - addressed in versions 9.4.0.19, 9.5.1.0, 9.5.1.1, 9.7.1.2, 9.9.0.0
IBM Spectrum Protect Plus - update to 10.1.16
python3x-pillow (Red Hat package) - update to 10.3.0-1.el8ap
python-pillow (Red Hat package) - update to 10.3.0-1.el9ap
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
Oracle Solaris - update to 11.4 SRU 65
PowerProtect Data Manager - update to 19.19.0-15
python-gunicorn (Red Hat package) - addressed in versions 20.1.0-7.1.2.el8ui, 22.0.0-1.el9ap
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.29, 23.0.2.1
python-packaging (Red Hat package) - update to 21.3-5.el8ui
python-attrs (Red Hat package) - update to 21.4.0-5.el8ui
python3x-gunicorn (Red Hat package) - update to 22.0.0-1.el8ap
python-aiofiles (Red Hat package) - update to 22.1.0-4.el8ui
python3x-black (Red Hat package) - update to 22.8.0-2.el8ap
python-black (Red Hat package) - update to 22.8.0-2.el9ap
python-django-filter (Red Hat package) - update to 23.2-3.el8ui
Junos cRPD - update to 23.4R1
Juniper Cloud Native Router - update to 23.4R1
python3x-pyOpenSSL (Red Hat package) - update to 24.1.0-1.el8ap
python-pyOpenSSL (Red Hat package) - update to 24.1.0-1.el9ap
python-cryptography - update to 36.0.1-1
python3.11-cryptography (Red Hat package) - addressed in versions 37.0.2-5.el8_8.1, 37.0.2-6.el8, 37.0.2-6.el9
python3-cryptography-doc - update to 39.0.0-4
python311-cryptography - update to 41.0.3-150400.16.12.1
python311-cryptography-debuginfo - update to 41.0.3-150400.16.12.1
python-cryptography - addressed in versions 41.0.7-1.fc39, 41.0.7-1.fc40
dev-python/cryptography - update to 42.0.4
python3x-cryptography (Red Hat package) - update to 42.0.5-1.el8ap
python-pytz (Red Hat package) - update to 2022.2.1-5.el8ui
python-uuid6 (Red Hat package) - update to 2023.5.2-4.el8ui
python-diff-match-patch (Red Hat package) - update to 20200713-6.el8ui

• https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97
• https://github.com/pyca/cryptography/pull/9926
• https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a

• Denial of service in cryptography package for Python
• Ubuntu update for python-cryptography
• SUSE update for python-cryptography
• SUSE update for python3-cryptography
• SUSE update for python-cryptography
• SUSE update for python-cryptography
• IBM Process Mining update for Cryptography package for Python
• Oracle Solaris update for thrid-party components
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Fedora 40 update for python-cryptography
• Fedora 39 update for python-cryptography
• Multiple vulnerabilities in IBM Spectrum Protect Plus File Systems Agent
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• NULL pointer dereference in IBM Maximo Application Suite - Edge Data Collector
• openEuler update for python-cryptography
• Multiple vulnerabilities in IBM Storage Sentinel Anomaly Scan Engine
• Multiple vulnerabilities in IBM Maximo Application Suite
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4 for RHEL 9
• Multiple vulnerabilities in IBM QRadar App SDK
• Multiple vulnerabilities in IBM QRadar Suite Software
• Multiple vulnerabilities in Juniper Cloud Native Router
• Multiple vulnerabilities in Juniper Networks Junos cRPD
• Multiple vulnerabilities in Oracle Communications User Data Repository
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Security Edge Protection Proxy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Unified Data Repository
• Multiple vulnerabilities in Oracle Communications Operations Monitor
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Data Analytics Function
• Multiple vulnerabilities in Oracle Communications Diameter Signaling Router
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Repository Function
• Multiple vulnerabilities in Red Hat Update Infrastructure (RHUI)
• NULL pointer dereference in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Red Hat Enterprise Linux 9 update for python3.11-cryptography
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
• Red Hat Enterprise Linux 8 update for python3.11-cryptography
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in IBM Planning Analytics Local - IBM Planning Analytics Workspace
• Gentoo update for cryptography
• SUSE update for python3-cryptography
• Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition
• NULL pointer dereference in IBM Storage Ceph
• Multiple vulnerabilities in Dell ObjectScale
• Multiple vulnerabilities in IBM QRadar SIEM
• Red Hat Enterprise Linux 8 update for python3.11-cryptography
• Multiple vulnerabilities in IBM Netezza for Cloud Pak for Data (on Cloud)
• Multiple vulnerabilities in Dell PowerScale OneFS
• Amazon Linux AMI update for python-cryptography
• Anolis OS update for python-cryptography
• Dell SmartFabric Storage Software update for third-party components
• Multiple vulnerabilities in Dell PowerProtect Data Manager
• Multiple vulnerabilities in IBM PowerVC
• Red Hat Enterprise Linux 8 update for python-cryptography
• Red Hat Enterprise Linux 8 update for python-cryptography
• Red Hat Enterprise Linux 9 update for python-cryptography
• Red Hat Enterprise Linux 9 update for python-cryptography
• Red Hat Enterprise Linux 9 update for python-cryptography
• Red Hat Enterprise Linux 8 update for python-cryptography
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• Red Hat Enterprise Linux 8 update for python-cryptography
• Anolis OS update for python-cryptography
• Red Hat Enterprise Linux 9 update for python-cryptography
• Multiple vulnerabilities in IBM Netezza Performance Server Replication Services