USN-6673-3: python-cryptography vulnerability
USN-6673-1 provided a security update for python-cryptography. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that python-cryptography incorrectly handled memory operations when processing mismatched PKCS#12 keys. A remote attacker could possibly use this issue to cause python-cryptography to crash, leading to a denial of service. This issue only affected Ubuntu 23.10. (CVE-2024-26130)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6673-3?
The severity of USN-6673-3 is classified as a medium risk due to potential memory handling issues.
How do I fix USN-6673-3?
You can fix USN-6673-3 by updating the python3-cryptography package to version 41.0.7-4ubuntu0.1 on Ubuntu 24.04.
What are the potential impacts of USN-6673-3?
The potential impacts of USN-6673-3 include application crashes or exploitation through improper handling of PKCS#12 keys.
Who is affected by USN-6673-3?
USN-6673-3 affects users of Ubuntu 24.04 LTS who have the python3-cryptography package installed.
Is USN-6673-3 applicable to earlier versions of Ubuntu?
No, USN-6673-3 specifically addresses issues found in Ubuntu 24.04 LTS with python3-cryptography.