Threat Intelligence Database

A vulnerability in the python-cryptography library allows duplicate self-signed intermediate certificates to cause exponential path-building. This can lead to performance degradation or denial of service. The issue affects multiple versions of the library and has been assigned CVE-2026-69249. A security update addressing this vulnerability is available from Red Hat.

A vulnerability in the python3.14-cryptography package for Red Hat Enterprise Linux 9 allows the verifier to accept wildcard DNS names that can escape from permittedSubtrees. This issue, tracked as CVE-2026-69248, has been addressed by Red Hat in updated packages. The vulnerability is rated as high severity and affects versions prior to the fixed release. Red Hat has released patches to remediate this issue.

A vulnerability in the python-cryptography library's PKCS#7 EnvelopedData decryption allows a Bleichenbacher oracle attack due to distinguishable errors and timing differences. This can potentially leak information during decryption operations. The issue is tracked as CVE-2026-69247 and affects multiple versions of the cryptography package. A patch is available to address this vulnerability.

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves (CVE-2026-26007) * pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A NULL pointer dereference vulnerability (CVE-2024-26130) exists in the python-cryptography library's pkcs12.serialize_key_and_certificates function when called with a non-matching certificate and private key along with an hmac_hash override. This flaw can cause a denial of service by crashing applications using the library. The issue affects cryptography versions prior to 50.0.0. Red Hat has released security updates for their python3.12-cryptography packages to address this vulnerability.