SUSE-SU-2026:21021-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 10 Apr 2026, 11:26
Last modified:14 Apr 2026, 18:27

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

10 Apr 2026, 11:26
Published
Vulnerability first disclosed
14 Apr 2026, 18:27
Last Modified
Vulnerability information updated

Description

Security update for python-cryptography This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876) - CVE-2026-26007: missing validation can lead to security issues for signature verification (ECDSA) and shared key negotiation (ECDH) (bsc#1258074).

Affected Systems

  • suse•python-cryptography&distro=SUSE Linux Micro 6.2

    < 44.0.3-160000.3.1

References (5)