Red Hat Product Errata RHSA-2025:13103 - Security Advisory
Issued:
2025-08-06
Updated:
2025-08-06

RHSA-2025:13103 - Security Advisory

Synopsis

Moderate: python-cryptography security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python-cryptography is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2255331 - CVE-2023-49083 python-cryptography: NULL-dereference when loading PKCS7 certificates

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
python-cryptography-36.0.1-4.el9_4.1.src.rpm SHA-256: 3b968e3be8e56d4c15351135409fb27e3b507c476808c08ccaac9befb8ed4947
x86_64
python-cryptography-debugsource-36.0.1-4.el9_4.1.x86_64.rpm SHA-256: 7fcf484365ae421b7ecd146e49f8af7d997df8e289cd21472b4e3a82ada9fc10
python3-cryptography-36.0.1-4.el9_4.1.x86_64.rpm SHA-256: 3c5d398f9833ff1ed0dd6dda6e48e85d5d5a7e27ecc5494ab5b8f1e8cce016d3
python3-cryptography-debuginfo-36.0.1-4.el9_4.1.x86_64.rpm SHA-256: 90871d45ee9e3f3840c981e06cab246308373a0e14517f838ea6e0949e4cf01e

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
python-cryptography-36.0.1-4.el9_4.1.src.rpm SHA-256: 3b968e3be8e56d4c15351135409fb27e3b507c476808c08ccaac9befb8ed4947
x86_64
python-cryptography-debugsource-36.0.1-4.el9_4.1.x86_64.rpm SHA-256: 7fcf484365ae421b7ecd146e49f8af7d997df8e289cd21472b4e3a82ada9fc10
python3-cryptography-36.0.1-4.el9_4.1.x86_64.rpm SHA-256: 3c5d398f9833ff1ed0dd6dda6e48e85d5d5a7e27ecc5494ab5b8f1e8cce016d3
python3-cryptography-debuginfo-36.0.1-4.el9_4.1.x86_64.rpm SHA-256: 90871d45ee9e3f3840c981e06cab246308373a0e14517f838ea6e0949e4cf01e

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
python-cryptography-36.0.1-4.el9_4.1.src.rpm SHA-256: 3b968e3be8e56d4c15351135409fb27e3b507c476808c08ccaac9befb8ed4947
s390x
python-cryptography-debugsource-36.0.1-4.el9_4.1.s390x.rpm SHA-256: 817ab35f40a286271f15f92d43985112cba8cd4390a875f2caea2026b28de241
python3-cryptography-36.0.1-4.el9_4.1.s390x.rpm SHA-256: 8be78ea9d143de6639f8b1257987926b9607f05fdf391183901e2cbaf0b7e711
python3-cryptography-debuginfo-36.0.1-4.el9_4.1.s390x.rpm SHA-256: d11523cb2ed7e9335a02350f9b2d86a5cea4290512336c5815c5c2b58a8e011f

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
python-cryptography-36.0.1-4.el9_4.1.src.rpm SHA-256: 3b968e3be8e56d4c15351135409fb27e3b507c476808c08ccaac9befb8ed4947
ppc64le
python-cryptography-debugsource-36.0.1-4.el9_4.1.ppc64le.rpm SHA-256: ba9a55aadc38b35b9b34234e50056a08469600f46e8d6984ffd202a3bb257aca
python3-cryptography-36.0.1-4.el9_4.1.ppc64le.rpm SHA-256: 4fe153abc08f05d23628acf1238997f8260756e0f47416974a28d1f7d6907ea7
python3-cryptography-debuginfo-36.0.1-4.el9_4.1.ppc64le.rpm SHA-256: 8916a9b22940496ad227bdc686a97d49c84b36c81c0581d5237f0941748d1282

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
python-cryptography-36.0.1-4.el9_4.1.src.rpm SHA-256: 3b968e3be8e56d4c15351135409fb27e3b507c476808c08ccaac9befb8ed4947
aarch64
python-cryptography-debugsource-36.0.1-4.el9_4.1.aarch64.rpm SHA-256: cb823ec722573c6dea3970800db04fe517b4fffb5af241134afb9e5700770adb
python3-cryptography-36.0.1-4.el9_4.1.aarch64.rpm SHA-256: 38cb7eebfdd310f54119c9ac08dcc5acce4ddebf5b4b9a505786cd58a15dc51d
python3-cryptography-debuginfo-36.0.1-4.el9_4.1.aarch64.rpm SHA-256: af6f7d2ab179063e59a22b6659f4591d49f085f761a3f3b22fb96a4b46217141

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
python-cryptography-36.0.1-4.el9_4.1.src.rpm SHA-256: 3b968e3be8e56d4c15351135409fb27e3b507c476808c08ccaac9befb8ed4947
ppc64le
python-cryptography-debugsource-36.0.1-4.el9_4.1.ppc64le.rpm SHA-256: ba9a55aadc38b35b9b34234e50056a08469600f46e8d6984ffd202a3bb257aca
python3-cryptography-36.0.1-4.el9_4.1.ppc64le.rpm SHA-256: 4fe153abc08f05d23628acf1238997f8260756e0f47416974a28d1f7d6907ea7
python3-cryptography-debuginfo-36.0.1-4.el9_4.1.ppc64le.rpm SHA-256: 8916a9b22940496ad227bdc686a97d49c84b36c81c0581d5237f0941748d1282

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
python-cryptography-36.0.1-4.el9_4.1.src.rpm SHA-256: 3b968e3be8e56d4c15351135409fb27e3b507c476808c08ccaac9befb8ed4947
x86_64
python-cryptography-debugsource-36.0.1-4.el9_4.1.x86_64.rpm SHA-256: 7fcf484365ae421b7ecd146e49f8af7d997df8e289cd21472b4e3a82ada9fc10
python3-cryptography-36.0.1-4.el9_4.1.x86_64.rpm SHA-256: 3c5d398f9833ff1ed0dd6dda6e48e85d5d5a7e27ecc5494ab5b8f1e8cce016d3
python3-cryptography-debuginfo-36.0.1-4.el9_4.1.x86_64.rpm SHA-256: 90871d45ee9e3f3840c981e06cab246308373a0e14517f838ea6e0949e4cf01e

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
python-cryptography-36.0.1-4.el9_4.1.src.rpm SHA-256: 3b968e3be8e56d4c15351135409fb27e3b507c476808c08ccaac9befb8ed4947
aarch64
python-cryptography-debugsource-36.0.1-4.el9_4.1.aarch64.rpm SHA-256: cb823ec722573c6dea3970800db04fe517b4fffb5af241134afb9e5700770adb
python3-cryptography-36.0.1-4.el9_4.1.aarch64.rpm SHA-256: 38cb7eebfdd310f54119c9ac08dcc5acce4ddebf5b4b9a505786cd58a15dc51d
python3-cryptography-debuginfo-36.0.1-4.el9_4.1.aarch64.rpm SHA-256: af6f7d2ab179063e59a22b6659f4591d49f085f761a3f3b22fb96a4b46217141

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
python-cryptography-36.0.1-4.el9_4.1.src.rpm SHA-256: 3b968e3be8e56d4c15351135409fb27e3b507c476808c08ccaac9befb8ed4947
s390x
python-cryptography-debugsource-36.0.1-4.el9_4.1.s390x.rpm SHA-256: 817ab35f40a286271f15f92d43985112cba8cd4390a875f2caea2026b28de241
python3-cryptography-36.0.1-4.el9_4.1.s390x.rpm SHA-256: 8be78ea9d143de6639f8b1257987926b9607f05fdf391183901e2cbaf0b7e711
python3-cryptography-debuginfo-36.0.1-4.el9_4.1.s390x.rpm SHA-256: d11523cb2ed7e9335a02350f9b2d86a5cea4290512336c5815c5c2b58a8e011f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.