critical
CVE-2026-39892
cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Red Hat7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (high), GHSA (medium).
Description
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.23 | py3-cryptography | 46.0.7-r0 |
| alpine 3.24 | py3-cryptography | 46.0.7-r0 |
| alpine edge | py3-cryptography | 46.0.7-r0 |
| chainguard | airflow-2, airflow-3, airflow-core-2 and 51 more | 2.11.2-r8 and 51 more |
| debian 14 | python-cryptography | 46.0.7-1 |
| echo pip::Echo OSV | cryptography | 46.0.7 |
| minimos | airflow-3, datadog-agent-7, datadog-agent-fips-7 and 7 more | 3.2.1-r0 and 8 more |
| pip::GitHub Security Advisory pip | cryptography | 46.0.7 |
| rapidfort alma 8 | fence-agents-aliyun, fence-agents-all, fence-agents-amt-ws and 44 more | no fix listed |
| rapidfort alma 9 | fence-agents-aliyun, fence-agents-all, fence-agents-amt-ws and 52 more | no fix listed |
| rapidfort alpine 3.20 | python3.11-cryptography-fips, python3.12-cryptography-fips, python3.13-cryptography-fips and 7 more | 46.0.7 |
| rapidfort alpine 3.21 | python3.11-cryptography-fips, python3.12-cryptography-fips, python3.13-cryptography-fips and 7 more | 46.0.7 |
Show all 392 entries from 23 sources
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.23 | py3-cryptography | 46.0.7-r0 |
| alpine 3.24 | py3-cryptography | 46.0.7-r0 |
| alpine edge | py3-cryptography | 46.0.7-r0 |
| chainguard | airflow-2 | 2.11.2-r8 |
| chainguard | airflow-3 | 3.2.0-r1 |
| chainguard | airflow-core-2 | 2.11.2-r5 |
| chainguard | airflow-core-3 | 3.2.0-r2 |
| chainguard | apache-beam-python-3.11-sdk | 2.73.0-r6 |
| chainguard | apache-beam-python-3.12-sdk | 2.72.0-r2 |
| chainguard | apache-beam-python-3.13-sdk | 2.73.0-r4 |
| chainguard | authentik-2025.12 | 2025.12.4-r3 |
| chainguard | authentik-2026.2 | 2026.2.1-r3 |
| chainguard | barman | 3.18.0-r2 |
| chainguard | dagster | 1.13.2-r0 |
| chainguard | dask-kubernetes | 2026.3.0-r3 |
| chainguard | datadog-agent-7.71 | 7.71.2-r26 |
| chainguard | datadog-agent-7.72 | 7.72.4-r27 |
| chainguard | datadog-agent-7.73 | 7.73.3-r23 |
| chainguard | datadog-agent-7.74 | 7.74.1-r19 |
| chainguard | datadog-agent-7.75 | 7.75.4-r6 |
| chainguard | datadog-agent-fips-7.71 | 7.71.2-r20 |
| chainguard | datadog-agent-fips-7.72 | 7.72.4-r18 |
| chainguard | datadog-agent-fips-7.73 | 7.73.3-r17 |
| chainguard | datadog-agent-fips-7.74 | 7.74.1-r16 |
| chainguard | datadog-agent-fips-7.75 | 7.75.4-r4 |
| chainguard | dbt-snowflake | 1.10.4-r4 |
| chainguard | ggshield | 1.51.0-r5 |
| chainguard | gitlab-cng-fips-18.7 | 18.7.6-r2 |
| chainguard | in-toto | 3.1.0-r0 |
| chainguard | jupyter-base-notebook | 7.5.5-r4 |
| chainguard | k8s-sidecar | 2.6.0-r0 |
| chainguard | kserve | 0.16.0-r25 |
| chainguard | kubeflow-jupyter-web-app | 1.10.0-r15 |
| chainguard | kubeflow-pipelines-visualization-server | 2.16.0-r4 |
| chainguard | kubeflow-volumes-web-app | 1.10.0-r16 |
| chainguard | label-studio | 1.23.0-r3 |
| chainguard | localstack | 4.14.0-r8 |
| chainguard | metaflow-service | 2.5.0-r10 |
| chainguard | mitmproxy | 12.2.2-r1 |
| chainguard | mlflow | 3.16.0-r0 |
| chainguard | mycli | 1.68.1-r0 |
| chainguard | nemo | 2.7.2-r2 |
| chainguard | opal | 0.9.4-r2 |
| chainguard | open-webui | 0.8.12-r3 |
| chainguard | openstack-kolla-toolbox-2025.1 | 20.4.0-r5 |
| chainguard | openstack-kolla-toolbox-2025.2 | 21.1.0-r3 |
| chainguard | pgadmin4 | 9.14-r1 |
| chainguard | pgadmin4-fips | 9.14-r1 |
| chainguard | prefect | 3.7.3-r0 |
| chainguard | py3-cassandra-medusa | 0.27.1-r2 |
| chainguard | request-1276 | 0.27.1-r2 |
| chainguard | semgrep | 1.160.0-r0 |
| chainguard | superset-5.0 | 5.0.0-r23 |
| chainguard | superset-6.0 | 6.0.0-r8 |
| chainguard | tritonserver-backend-vllm-cuda-13.0 | 25.11-r4 |
| chainguard | vllm-openai-cuda-12.9 | 0.19.0-r0 |
| chainguard | wazuh-manager | 4.14.4-r5 |
| debian 14 | python-cryptography | 46.0.7-1 |
| echo pip::Echo OSV | cryptography | 46.0.7 |
| minimos | airflow-3 | 3.2.1-r0 |
| minimos | datadog-agent-7 | 7.82.3-r0 |
| minimos | datadog-agent-fips-7 | 7.80.0-r0 |
| minimos | k8s-sidecar | 2.6.0-r0 |
| minimos | kserve | 0.19.0-r5 |
| minimos | label-studio | 1.23.1-r0 |
| minimos | litellm-1.83 | 1.83.10-r0 |
| minimos | mcp-server-fetch | 2026.6.16-r0 |
| minimos | mcp-time | 2026.6.16-r0 |
| minimos | py3-cryptography | 46.0.7-r0 |
| pip::GitHub Security Advisory pip | cryptography | 46.0.7 |
| rapidfort alma 8 | fence-agents-aliyun | no fix listed |
| rapidfort alma 8 | fence-agents-all | no fix listed |
| rapidfort alma 8 | fence-agents-amt-ws | no fix listed |
| rapidfort alma 8 | fence-agents-apc | no fix listed |
| rapidfort alma 8 | fence-agents-apc-snmp | no fix listed |
| rapidfort alma 8 | fence-agents-aws | no fix listed |
| rapidfort alma 8 | fence-agents-azure-arm | no fix listed |
| rapidfort alma 8 | fence-agents-bladecenter | no fix listed |
| rapidfort alma 8 | fence-agents-brocade | no fix listed |
| rapidfort alma 8 | fence-agents-cisco-mds | no fix listed |
| rapidfort alma 8 | fence-agents-cisco-ucs | no fix listed |
| rapidfort alma 8 | fence-agents-common | no fix listed |
| rapidfort alma 8 | fence-agents-compute | no fix listed |
| rapidfort alma 8 | fence-agents-drac5 | no fix listed |
| rapidfort alma 8 | fence-agents-eaton-snmp | no fix listed |
| rapidfort alma 8 | fence-agents-emerson | no fix listed |
| rapidfort alma 8 | fence-agents-eps | no fix listed |
| rapidfort alma 8 | fence-agents-gce | no fix listed |
| rapidfort alma 8 | fence-agents-heuristics-ping | no fix listed |
| rapidfort alma 8 | fence-agents-hpblade | no fix listed |
| rapidfort alma 8 | fence-agents-ibm-powervs | no fix listed |
| rapidfort alma 8 | fence-agents-ibm-vpc | no fix listed |
| rapidfort alma 8 | fence-agents-ibmblade | no fix listed |
| rapidfort alma 8 | fence-agents-ifmib | no fix listed |
| rapidfort alma 8 | fence-agents-ilo-moonshot | no fix listed |
| rapidfort alma 8 | fence-agents-ilo-mp | no fix listed |
| rapidfort alma 8 | fence-agents-ilo-ssh | no fix listed |
| rapidfort alma 8 | fence-agents-ilo2 | no fix listed |
| rapidfort alma 8 | fence-agents-intelmodular | no fix listed |
| rapidfort alma 8 | fence-agents-ipdu | no fix listed |
| rapidfort alma 8 | fence-agents-ipmilan | no fix listed |
| rapidfort alma 8 | fence-agents-kdump | no fix listed |
| rapidfort alma 8 | fence-agents-kubevirt | no fix listed |
| rapidfort alma 8 | fence-agents-lpar | no fix listed |
| rapidfort alma 8 | fence-agents-mpath | no fix listed |
| rapidfort alma 8 | fence-agents-nutanix-ahv | no fix listed |
| rapidfort alma 8 | fence-agents-openstack | no fix listed |
| rapidfort alma 8 | fence-agents-redfish | no fix listed |
| rapidfort alma 8 | fence-agents-rhevm | no fix listed |
| rapidfort alma 8 | fence-agents-rsa | no fix listed |
| rapidfort alma 8 | fence-agents-rsb | no fix listed |
| rapidfort alma 8 | fence-agents-sbd | no fix listed |
| rapidfort alma 8 | fence-agents-scsi | no fix listed |
| rapidfort alma 8 | fence-agents-virsh | no fix listed |
| rapidfort alma 8 | fence-agents-vmware-rest | no fix listed |
| rapidfort alma 8 | fence-agents-vmware-soap | no fix listed |
| rapidfort alma 8 | fence-agents-wti | no fix listed |
| rapidfort alma 9 | fence-agents-aliyun | no fix listed |
| rapidfort alma 9 | fence-agents-all | no fix listed |
| rapidfort alma 9 | fence-agents-amt-ws | no fix listed |
| rapidfort alma 9 | fence-agents-apc | no fix listed |
| rapidfort alma 9 | fence-agents-apc-snmp | no fix listed |
| rapidfort alma 9 | fence-agents-aws | no fix listed |
| rapidfort alma 9 | fence-agents-azure-arm | no fix listed |
| rapidfort alma 9 | fence-agents-bladecenter | no fix listed |
| rapidfort alma 9 | fence-agents-brocade | no fix listed |
| rapidfort alma 9 | fence-agents-cisco-mds | no fix listed |
| rapidfort alma 9 | fence-agents-cisco-ucs | no fix listed |
| rapidfort alma 9 | fence-agents-common | no fix listed |
| rapidfort alma 9 | fence-agents-compute | no fix listed |
| rapidfort alma 9 | fence-agents-drac5 | no fix listed |
| rapidfort alma 9 | fence-agents-eaton-snmp | no fix listed |
| rapidfort alma 9 | fence-agents-emerson | no fix listed |
| rapidfort alma 9 | fence-agents-eps | no fix listed |
| rapidfort alma 9 | fence-agents-gce | no fix listed |
| rapidfort alma 9 | fence-agents-heuristics-ping | no fix listed |
| rapidfort alma 9 | fence-agents-hpblade | no fix listed |
| rapidfort alma 9 | fence-agents-ibm-powervs | no fix listed |
| rapidfort alma 9 | fence-agents-ibm-vpc | no fix listed |
| rapidfort alma 9 | fence-agents-ibmblade | no fix listed |
| rapidfort alma 9 | fence-agents-ifmib | no fix listed |
| rapidfort alma 9 | fence-agents-ilo-moonshot | no fix listed |
| rapidfort alma 9 | fence-agents-ilo-mp | no fix listed |
| rapidfort alma 9 | fence-agents-ilo-ssh | no fix listed |
| rapidfort alma 9 | fence-agents-ilo2 | no fix listed |
| rapidfort alma 9 | fence-agents-intelmodular | no fix listed |
| rapidfort alma 9 | fence-agents-ipdu | no fix listed |
| rapidfort alma 9 | fence-agents-ipmilan | no fix listed |
| rapidfort alma 9 | fence-agents-kdump | no fix listed |
| rapidfort alma 9 | fence-agents-kubevirt | no fix listed |
| rapidfort alma 9 | fence-agents-lpar | no fix listed |
| rapidfort alma 9 | fence-agents-mpath | no fix listed |
| rapidfort alma 9 | fence-agents-nutanix-ahv | no fix listed |
| rapidfort alma 9 | fence-agents-openstack | no fix listed |
| rapidfort alma 9 | fence-agents-redfish | no fix listed |
| rapidfort alma 9 | fence-agents-rhevm | no fix listed |
| rapidfort alma 9 | fence-agents-rsa | no fix listed |
| rapidfort alma 9 | fence-agents-rsb | no fix listed |
| rapidfort alma 9 | fence-agents-sbd | no fix listed |
| rapidfort alma 9 | fence-agents-scsi | no fix listed |
| rapidfort alma 9 | fence-agents-virsh | no fix listed |
| rapidfort alma 9 | fence-agents-vmware-rest | no fix listed |
| rapidfort alma 9 | fence-agents-vmware-soap | no fix listed |
| rapidfort alma 9 | fence-agents-wti | no fix listed |
| rapidfort alma 9 | fence-virt | no fix listed |
| rapidfort alma 9 | fence-virtd | no fix listed |
| rapidfort alma 9 | fence-virtd-cpg | no fix listed |
| rapidfort alma 9 | fence-virtd-libvirt | no fix listed |
| rapidfort alma 9 | fence-virtd-multicast | no fix listed |
| rapidfort alma 9 | fence-virtd-serial | no fix listed |
| rapidfort alma 9 | fence-virtd-tcp | no fix listed |
| rapidfort alma 9 | ha-cloud-support | no fix listed |
| rapidfort alpine 3.20 | python3.11-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.20 | python3.12-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.20 | python3.13-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.20 | python3.14-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.20 | python3.9-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.20 | rf-python3.11-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.20 | rf-python3.12-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.20 | rf-python3.13-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.20 | rf-python3.14-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.20 | rf-python3.9-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.21 | python3.11-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.21 | python3.12-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.21 | python3.13-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.21 | python3.14-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.21 | python3.9-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.21 | rf-python3.11-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.21 | rf-python3.12-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.21 | rf-python3.13-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.21 | rf-python3.14-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.21 | rf-python3.9-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.22 | python3.11-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.22 | python3.12-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.22 | python3.13-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.22 | python3.14-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.22 | python3.9-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.22 | rf-python3.11-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.22 | rf-python3.12-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.22 | rf-python3.13-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.22 | rf-python3.14-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.22 | rf-python3.9-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.23 | python3.11-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.23 | python3.12-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.23 | python3.13-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.23 | python3.14-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.23 | python3.9-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.23 | rf-python3.11-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.23 | rf-python3.12-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.23 | rf-python3.13-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.23 | rf-python3.14-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.23 | rf-python3.9-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.24 | python3.11-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.24 | python3.12-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.24 | python3.13-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.24 | python3.14-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.24 | python3.9-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.24 | rf-python3.11-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.24 | rf-python3.12-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.24 | rf-python3.13-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.24 | rf-python3.14-cryptography-fips | 46.0.7 |
| rapidfort alpine 3.24 | rf-python3.9-cryptography-fips | 46.0.7 |
| rapidfort debian 12 | python-cryptography | 0:46.0.7-1 |
| rapidfort debian 13 | python-cryptography | 0:46.0.7-1 |
| rapidfort fedora 43 | python-cryptography | 0:46.0.7-1.fc43 |
| rapidfort fedora 43 | python3-cryptography | 0:46.0.7-1.fc43 |
| rapidfort Oracle Linux 9 | fence-agents-aliyun | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-all | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-amt-ws | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-apc | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-apc-snmp | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-aws | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-azure-arm | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-bladecenter | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-brocade | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-cisco-mds | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-cisco-ucs | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-common | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-compute | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-drac5 | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-eaton-snmp | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-emerson | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-eps | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-gce | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-heuristics-ping | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-hpblade | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ibm-powervs | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ibm-vpc | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ibmblade | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ifmib | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ilo-moonshot | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ilo-mp | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ilo-ssh | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ilo2 | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-intelmodular | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ipdu | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ipmilan | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-kdump | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-kubevirt | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-lpar | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-mpath | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-nutanix-ahv | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-openstack | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-redfish | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-rhevm | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-rsa | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-rsb | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-sbd | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-scsi | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-virsh | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-vmware-rest | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-vmware-soap | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-wti | no fix listed |
| rapidfort Oracle Linux 9 | fence-virt | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd-cpg | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd-libvirt | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd-multicast | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd-serial | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd-tcp | no fix listed |
| rapidfort Oracle Linux 9 | ha-cloud-support | no fix listed |
| rapidfort rocky 8 | fence-agents | no fix listed |
| rapidfort rocky 8 | fence-agents-aliyun | no fix listed |
| rapidfort rocky 8 | fence-agents-all | no fix listed |
| rapidfort rocky 8 | fence-agents-aws | no fix listed |
| rapidfort rocky 8 | fence-agents-azure-arm | no fix listed |
| rapidfort rocky 8 | fence-agents-common | no fix listed |
| rapidfort rocky 8 | fence-agents-compute | no fix listed |
| rapidfort rocky 8 | fence-agents-gce | no fix listed |
| rapidfort rocky 8 | fence-agents-kdump | no fix listed |
| rapidfort rocky 8 | fence-agents-kubevirt | no fix listed |
| rapidfort rocky 8 | fence-agents-openstack | no fix listed |
| rapidfort rocky 8 | fence-agents-redfish | no fix listed |
| rapidfort rocky 9 | fence-agents | no fix listed |
| rapidfort rocky 9 | fence-agents-aliyun | no fix listed |
| rapidfort rocky 9 | fence-agents-all | no fix listed |
| rapidfort rocky 9 | fence-agents-aws | no fix listed |
| rapidfort rocky 9 | fence-agents-azure-arm | no fix listed |
| rapidfort rocky 9 | fence-agents-common | no fix listed |
| rapidfort rocky 9 | fence-agents-compute | no fix listed |
| rapidfort rocky 9 | fence-agents-gce | no fix listed |
| rapidfort rocky 9 | fence-agents-kdump | no fix listed |
| rapidfort rocky 9 | fence-agents-kubevirt | no fix listed |
| rapidfort rocky 9 | fence-agents-openstack | no fix listed |
| rapidfort rocky 9 | fence-agents-redfish | no fix listed |
| rapidfort rocky 9 | fence-virt | no fix listed |
| rapidfort rocky 9 | fence-virtd | no fix listed |
| rapidfort rocky 9 | fence-virtd-cpg | no fix listed |
| rapidfort rocky 9 | fence-virtd-libvirt | no fix listed |
| rapidfort rocky 9 | fence-virtd-multicast | no fix listed |
| rapidfort rocky 9 | fence-virtd-serial | no fix listed |
| rapidfort rocky 9 | fence-virtd-tcp | no fix listed |
| rapidfort rocky 9 | ha-cloud-support | no fix listed |
| Red Hat | fence-agents | no fix listed |
| Red Hat | fence-agents-aliyun | no fix listed |
| Red Hat | fence-agents-all | no fix listed |
| Red Hat | fence-agents-amt-ws | no fix listed |
| Red Hat | fence-agents-apc | no fix listed |
| Red Hat | fence-agents-apc-snmp | no fix listed |
| Red Hat | fence-agents-aws | no fix listed |
| Red Hat | fence-agents-azure-arm | no fix listed |
| Red Hat | fence-agents-bladecenter | no fix listed |
| Red Hat | fence-agents-brocade | no fix listed |
| Red Hat | fence-agents-cisco-mds | no fix listed |
| Red Hat | fence-agents-cisco-ucs | no fix listed |
| Red Hat | fence-agents-common | no fix listed |
| Red Hat | fence-agents-compute | no fix listed |
| Red Hat | fence-agents-drac5 | no fix listed |
| Red Hat | fence-agents-eaton-snmp | no fix listed |
| Red Hat | fence-agents-emerson | no fix listed |
| Red Hat | fence-agents-eps | no fix listed |
| Red Hat | fence-agents-gce | no fix listed |
| Red Hat | fence-agents-heuristics-ping | no fix listed |
| Red Hat | fence-agents-hpblade | no fix listed |
| Red Hat | fence-agents-ibm-powervs | no fix listed |
| Red Hat | fence-agents-ibm-vpc | no fix listed |
| Red Hat | fence-agents-ibmblade | no fix listed |
| Red Hat | fence-agents-ifmib | no fix listed |
| Red Hat | fence-agents-ilo-moonshot | no fix listed |
| Red Hat | fence-agents-ilo-mp | no fix listed |
| Red Hat | fence-agents-ilo-ssh | no fix listed |
| Red Hat | fence-agents-ilo2 | no fix listed |
| Red Hat | fence-agents-intelmodular | no fix listed |
| Red Hat | fence-agents-ipdu | no fix listed |
| Red Hat | fence-agents-ipmilan | no fix listed |
| Red Hat | fence-agents-kdump | no fix listed |
| Red Hat | fence-agents-kubevirt | no fix listed |
| Red Hat | fence-agents-lpar | no fix listed |
| Red Hat | fence-agents-mpath | no fix listed |
| Red Hat | fence-agents-nutanix-ahv | no fix listed |
| Red Hat | fence-agents-openstack | no fix listed |
| Red Hat | fence-agents-redfish | no fix listed |
| Red Hat | fence-agents-rhevm | no fix listed |
| Red Hat | fence-agents-rsa | no fix listed |
| Red Hat | fence-agents-rsb | no fix listed |
| Red Hat | fence-agents-sbd | no fix listed |
| Red Hat | fence-agents-scsi | no fix listed |
| Red Hat | fence-agents-virsh | no fix listed |
| Red Hat | fence-agents-vmware-rest | no fix listed |
| Red Hat | fence-agents-vmware-soap | no fix listed |
| Red Hat | fence-agents-wti | no fix listed |
| Red Hat | fence-agents-zvm | no fix listed |
| Red Hat | fence-virt | no fix listed |
| Red Hat | fence-virtd | no fix listed |
| Red Hat | fence-virtd-cpg | no fix listed |
| Red Hat | fence-virtd-libvirt | no fix listed |
| Red Hat | fence-virtd-multicast | no fix listed |
| Red Hat | fence-virtd-serial | no fix listed |
| Red Hat | fence-virtd-tcp | no fix listed |
| Red Hat | ha-cloud-support | no fix listed |
| Red Hat | redhat-user-workloads/iop-advisor-engine | no fix listed |
| Red Hat | satellite/foreman-mcp-server-rhel9 | no fix listed |
| wolfi | airflow-3 | 3.2.0-r1 |
| wolfi | dask-kubernetes | 2026.3.0-r3 |
| wolfi | datadog-agent-7.72 | 7.72.4-r27 |
| wolfi | datadog-agent-7.73 | 7.73.3-r23 |
| wolfi | datadog-agent-7.74 | 7.74.1-r19 |
| wolfi | ggshield | 1.51.0-r5 |
| wolfi | in-toto | 3.1.0-r0 |
| wolfi | jupyter-base-notebook | 7.5.5-r4 |
| wolfi | k8s-sidecar | 2.6.0-r0 |
| wolfi | kserve | 0.16.0-r25 |
| wolfi | kubeflow-jupyter-web-app | 1.10.0-r15 |
| wolfi | kubeflow-pipelines-visualization-server | 2.16.0-r4 |
| wolfi | kubeflow-volumes-web-app | 1.10.0-r16 |
| wolfi | mitmproxy | 12.2.2-r1 |
| wolfi | mlflow | 3.16.0-r0 |
| wolfi | mycli | 1.68.1-r0 |
| wolfi | open-webui | 0.8.12-r3 |
| wolfi | py3-cassandra-medusa | 0.27.1-r2 |
| wolfi | semgrep | 1.160.0-r0 |
| wolfi | superset-6.0 | 6.0.0-r8 |
References
- http://www.openwall.com/lists/oss-security/2026/04/08/12
- https://access.redhat.com/errata/RHSA-2026:19375
- https://access.redhat.com/errata/RHSA-2026:20338
- https://access.redhat.com/errata/RHSA-2026:21017
- https://access.redhat.com/errata/RHSA-2026:22465
- https://access.redhat.com/errata/RHSA-2026:22629
- https://access.redhat.com/errata/RHSA-2026:22840
- https://access.redhat.com/errata/RHSA-2026:23361
All 36 references
- https://access.redhat.com/errata/RHSA-2026:24483
- https://access.redhat.com/errata/RHSA-2026:24761
- https://access.redhat.com/errata/RHSA-2026:24762
- https://access.redhat.com/errata/RHSA-2026:24853
- https://access.redhat.com/errata/RHSA-2026:24866
- https://access.redhat.com/errata/RHSA-2026:24977
- https://access.redhat.com/errata/RHSA-2026:30088
- https://access.redhat.com/errata/RHSA-2026:30089
- https://access.redhat.com/errata/RHSA-2026:37275
- https://access.redhat.com/errata/RHSA-2026:42644
- https://access.redhat.com/errata/RHSA-2026:43651
- https://access.redhat.com/errata/RHSA-2026:43670
- https://access.redhat.com/errata/RHSA-2026:43851
- https://access.redhat.com/errata/RHSA-2026:43853
- https://access.redhat.com/errata/RHSA-2026:43854
- https://access.redhat.com/errata/RHSA-2026:43855
- https://access.redhat.com/errata/RHSA-2026:46956
- https://access.redhat.com/errata/RHSA-2026:7295
- https://access.redhat.com/security/cve/CVE-2026-39892
- https://advisory.echohq.com/cve/CVE-2026-39892
- https://bugzilla.redhat.com/show_bug.cgi?id=2456735
- https://github.com/pyca/cryptography
- https://github.com/pyca/cryptography/commit/622d672e429a7cff836a23c5903683dbec1901f5
- https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq
- https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2026-36.yaml
- https://nvd.nist.gov/vuln/detail/CVE-2026-39892
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39892.json
- https://www.cve.org/CVERecord?id=CVE-2026-39892