Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Ubuntu 24.04 LTS USN-6673-3 Critical: Python-Cryptography DoS Issue

ubuntu
Calendar Grey May 27, 2024
Dist Ubuntu Esm H88
The latest security advisory for Ubuntu 24.04 LTS emphasizes a vital update for the python-cryptography package, addressing risks of crashes from harmful user inputs
python-cryptography could be made to crash if it received specially crafted input.

Summary

python-cryptography could be made to crash if it received specially crafted

input.

Software Description:

- python-cryptography: Cryptography Python library

Details:

USN-6673-1 provided a security update for python-cryptography.

This update provides the corresponding update for Ubuntu 24.04 LTS.

Original advisory details:

 It was discovered that python-cryptography incorrectly handled memory

 operations when processing mismatched PKCS#12 keys. A remote attacker could

 possibly use this issue to cause python-cryptography to crash, leading to a

 denial of service. This issue only affected Ubuntu 23.10. (CVE-2024-26130)

Topics%20covered

Topics Covered

security advisory denial of service memory issue ubuntu python-cryptography

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   python3-cryptography            41.0.7-4ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-6673-3

  https://ubuntu.com/security/notices/USN-6673-1

  CVE-2024-26130

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6673-3

Topics%20covered

Topics Covered

security advisory denial of service memory issue ubuntu python-cryptography

Package Information

https://launchpad.net/ubuntu/+source/python-cryptography/41.0.7-4ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here