Critical Security Update for python3.14-cryptography: Addressing Vulnerabilities CVE-2026-69248 and CVE-2026-69249
Summary
RHSA-2026:64774: Red Hat Security Advisory: python3.14-cryptography security update. Affects python3.14-cryptography versions < 0:45.0.4-4.el9_8.6. Fixed in 0:45.0.4-4.el9_8.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The python3.14-cryptography package is a widely used library in Python for cryptographic operations, providing essential functionalities such as encryption, decryption, and secure data transmission. It is integral to many applications that require secure communication and data integrity. However, recent vulnerabilities have been identified that could potentially compromise the security of applications relying on this library.
Vulnerability Detail
The vulnerabilities identified as CVE-2026-69248 and CVE-2026-69249 in the python3.14-cryptography package stem from flaws in the cryptographic algorithms implemented within the library. These vulnerabilities could allow attackers to exploit weaknesses in the encryption processes, leading to unauthorized access to sensitive data or the ability to manipulate encrypted communications. The potential ramifications include data breaches and loss of confidentiality, making it critical for users to address these issues promptly.
How To Fix
Minimum fixed version
0:45.0.4-4.el9_8.6
This is the first release that contains the fix.
sudo dnf update python3.14-cryptographyTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may consider disabling the affected functionalities of the python3.14-cryptography package until the update can be applied. However, this is not a long-term solution and should only be used if absolutely necessary.
Conclusion
The vulnerabilities in the python3.14-cryptography package pose significant risks to applications relying on its cryptographic functionalities. It is crucial for users to update to the patched version promptly to mitigate these risks and ensure the security of their applications.
See every vulnerability recorded for python3.14-cryptography →
FAQ
These are identifiers for specific vulnerabilities found in the python3.14-cryptography package that could lead to security breaches.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
The CVSS score for these vulnerabilities is 7.5, indicating a high severity level.
If an immediate update is not possible, consider disabling the affected functionalities as a temporary workaround.
Detailed information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:64774.json.
Related vulnerabilities
Recent vulnerabilities recorded for python3.14-cryptography.
