CVE-2023-50782
Fixed in a distro release EPSS 1%CVSS 7.5
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
Products: Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Satellite 6, Red Hat Update Infrastructure 4 for Cloud Providers
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | cryptography | 42.0.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | airflow | 2.10.5-r44 |
| Chainguard | airflow | no fix |
| Chainguard | airflow-bitnami-compat | no fix |
| Chainguard | az | 2.57.0-r0 |
| Chainguard | ggshield | 1.25.0-r0 |
| Chainguard | kubeflow-pipelines | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-apiserver | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-cache-deployer | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-cache-deployer-compat | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-cache_server | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-frontend | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-metadata-envoy-config | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-metadata-writer | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-metadata-writer-compat | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-persistence_agent | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-scheduledworkflow | 2.0.5-r3 |
| Chainguard | kubeflow-pipelines-viewer-crd-controller | 2.0.5-r3 |
| Chainguard | mitmproxy | 12.2.1-r0 |
| Chainguard | py3-cassandra-medusa | 0.17.2-r1 |
| Chainguard | py3-cassandra-medusa-compat | 0.17.2-r1 |
| Debian 12 | python-cryptography | no fix |
| Debian 13 | python-cryptography | 42.0.5-1 |
| Debian 14 | python-cryptography | 42.0.5-1 |
| SUSE Enterprise Storage 7.1 | openssl-1_1 | 1.1.1d-150200.11.97.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | openssl-1_1 | 1.1.1d-150200.11.97.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | openssl-1_1 | 1.1.1d-150200.11.97.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | openssl-1_1 | 1.1.1l-150400.7.75.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | openssl-1_1 | 1.1.1l-150400.7.75.1 |
| SUSE Linux Enterprise Micro 5.1 | openssl-1_1 | 1.1.1d-150200.11.97.1 |
| SUSE Linux Enterprise Micro 5.2 | openssl-1_1 | 1.1.1d-150200.11.97.1 |
| SUSE Linux Enterprise Micro 5.3 | openssl-1_1 | 1.1.1l-150400.7.75.1 |
| SUSE Linux Enterprise Micro 5.3 | openssl-3 | 3.0.8-150400.4.69.1 |
| SUSE Linux Enterprise Micro 5.4 | openssl-1_1 | 1.1.1l-150400.7.75.1 |
| SUSE Linux Enterprise Micro 5.4 | openssl-3 | 3.0.8-150400.4.69.1 |
| SUSE Linux Enterprise Micro 5.5 | openssl-1_1 | 1.1.1l-150500.17.37.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.37.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | openssl-3 | 3.0.8-150500.5.48.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | openssl-3 | 3.1.4-150600.5.21.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.9.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.9.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | openssl-1_1 | 1.1.1d-2.113.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | openssl-1_1 | 1.1.1d-150200.11.97.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | openssl-1_1 | 1.1.1d-150200.11.97.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | openssl-1_1 | 1.1.1l-150400.7.75.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | openssl-3 | 3.0.8-150400.4.69.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | openssl-1_1 | 1.1.1d-2.113.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | openssl-1_1 | 1.1.1d-150200.11.97.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | openssl-1_1 | 1.1.1d-150200.11.97.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.75.1 |
| SUSE Linux Micro 6.0 | openssl-3 | 3.1.4-7.1 |
| SUSE Linux Micro 6.1 | openssl-3 | 3.1.4-slfo.1.1_6.1 |
| SUSE Manager Server 4.3 | openssl-1_1 | 1.1.1l-150400.7.75.1 |
| SUSE Manager Server 4.3 | openssl-3 | 3.0.8-150400.4.69.1 |
| Ubuntu 20.04 LTS | openssl | 1.1.1f-1ubuntu2.22 |
| Ubuntu 20.04 LTS | python-cryptography | 2.8-3ubuntu0.3 |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.15 |
| Ubuntu 22.04 LTS | python-cryptography | 3.4.8-1ubuntu2.2 |
| Ubuntu Pro 16.04 LTS | python-cryptography | 1.2.3-1ubuntu0.3+esm1 |
| Ubuntu Pro 18.04 LTS | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm5 |
| Ubuntu Pro 18.04 LTS | python-cryptography | 2.1.4-1ubuntu1.4+esm1 |
| Wolfi | airflow | 2.10.5-r44 |
| Wolfi | airflow | no fix |
| Wolfi | airflow-bitnami-compat | no fix |
| Wolfi | az | 2.57.0-r0 |
| Wolfi | ggshield | 1.25.0-r0 |
| Wolfi | kubeflow-pipelines | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-apiserver | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-cache-deployer | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-cache-deployer-compat | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-cache_server | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-frontend | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-metadata-envoy-config | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-metadata-writer | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-metadata-writer-compat | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-persistence_agent | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-scheduledworkflow | 2.0.5-r3 |
| Wolfi | kubeflow-pipelines-viewer-crd-controller | 2.0.5-r3 |
| Wolfi | mitmproxy | 12.2.1-r0 |
| Wolfi | py3-cassandra-medusa | 0.17.2-r1 |
| Wolfi | py3-cassandra-medusa-compat | 0.17.2-r1 |
| openSUSE Leap 15.5 | openssl-1_1 | 1.1.1l-150500.17.37.1 |
| openSUSE Leap 15.5 | openssl-3 | 3.0.8-150500.5.48.1 |
| openSUSE Leap 15.6 | openssl-1_1 | 1.1.1w-150600.5.9.1 |
| openSUSE Leap 15.6 | openssl-3 | 3.1.4-150600.5.21.1 |
| openSUSE Leap Micro 5.5 | openssl-1_1 | 1.1.1l-150500.17.37.1 |
| openSUSE Tumbleweed | openssl-3 | 3.1.4-15.1 |