[ALSA-2026:64774] Important: python3.14-cryptography security update
Type:
security
Severity:
important
Release date:
2026-09-08
Description:
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building (CVE-2026-69249) * python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees (CVE-2026-69248) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 python3.14-cryptography-45.0.4-4.el9_8.6.aarch64.rpm 4a63846b8e4e043ed09d6d00f38b47aea14d9b39acb26998c7a608d927934614
ppc64le python3.14-cryptography-45.0.4-4.el9_8.6.ppc64le.rpm 8cf43301986d1e37e898a08df1366340ca8f6a018d9f4069bb7427e162eb67a7
s390x python3.14-cryptography-45.0.4-4.el9_8.6.s390x.rpm 894bcd5ca091b6d6f5a977212eb3e0fc74a47c4031b3b5e6d44a7d30f50228dd
x86_64 python3.14-cryptography-45.0.4-4.el9_8.6.x86_64.rpm 2f0cc81ac11c87119dc6804b95ac364c76cf0c50a1aad289a7eb4fe443c2c4cc
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.