CVE catalog
CVE-2023-23931
python-cryptography: CVE-2023-23931
- Severity
- Medium · CVSS 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.30% · Oct 25, 2026
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | python-cryptography | sid | 49.0.0-2 | fixed |
| Debian | python-cryptography | forky | 49.0.0-2 | fixed |
| Debian | python-cryptography | trixie | 43.0.0-3+deb13u1 | fixed |
| Debian | python-cryptography | bookworm | 38.0.4-3+deb12u1 | fixed |
| Debian | python-cryptography | bookworm-security | 38.0.4-3~deb12u1 | vulnerable |
| PyPI | cryptography | Not reported | 39.0.1 | fixed |
| PyPI | cryptography | Not reported | 39.0.1 | fixed |
| PyPI | cryptography | Not reported | 94a50a9731f35405f0357fa5f3b177d46a726ab3 | fixed |
| Opensuse | python-oci-sdk | tumbleweed | 2.180.0-1.2 | fixed |
| Ubuntu | python-cryptography | pro | 1.9-1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.3-3 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1build1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1build2 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.2 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.3 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.4 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.4+esm1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.4+esm3 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.4+esm6 | fixed |
| Ubuntu | python-cryptography | 20.04 | 2.6.1-3.1 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.6.1-4 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.6.1-4ubuntu1 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.8-1ubuntu2 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.8-2 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.8-3 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.8-3ubuntu0.1 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.8-3ubuntu0.2 | fixed |
| Ubuntu | python-cryptography | 22.04 | 3.3.2-1 | vulnerable |
| Ubuntu | python-cryptography | 22.04 | 3.3.2-1build1 | vulnerable |
| Ubuntu | python-cryptography | 22.04 | 3.4.8-1 | vulnerable |
| Ubuntu | python-cryptography | 22.04 | 3.4.8-1ubuntu1 | vulnerable |
| Ubuntu | python-cryptography | 22.04 | 3.4.8-1ubuntu2 | vulnerable |
| Ubuntu | python-cryptography | 22.04 | 3.4.8-1ubuntu2.1 | fixed |
| Ubuntu | python-cryptography | pro | 1.9-1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.3-3 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1build1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1build2 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.2 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.3 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.4 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.4+esm1 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.4+esm3 | vulnerable |
| Ubuntu | python-cryptography | pro | 2.1.4-1ubuntu1.4+esm6 | fixed |
| Ubuntu | python-cryptography | 26.04 | 43.0.0-1ubuntu1 | vulnerable |
| Ubuntu | python-cryptography | 26.04 | 46.0.1-1ubuntu2 | vulnerable |
| Ubuntu | python-cryptography | 26.04 | 46.0.5-1ubuntu1 | vulnerable |
| Ubuntu | python-cryptography | 26.04 | 46.0.5-1ubuntu2 | vulnerable |
| Ubuntu | python-cryptography | 26.04 | 46.0.5-1ubuntu2.2 | fixed |
| Alpine | py3-cryptography | 3.23 | 39.0.1-r0 | fixed |
| Alpine | py3-cryptography | 3.24 | 39.0.1-r0 | fixed |
| Ubuntu | python-cryptography | 20.04 | 2.6.1-3.1 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.6.1-4 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.6.1-4ubuntu1 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.8-1ubuntu2 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.8-2 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.8-3 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.8-3ubuntu0.1 | vulnerable |
| Ubuntu | python-cryptography | 20.04 | 2.8-3ubuntu0.2 | fixed |
| Ubuntu | python-cryptography | 22.04 | 3.3.2-1 | vulnerable |
| Ubuntu | python-cryptography | 22.04 | 3.3.2-1build1 | vulnerable |
| Ubuntu | python-cryptography | 22.04 | 3.4.8-1 | vulnerable |
| Ubuntu | python-cryptography | 22.04 | 3.4.8-1ubuntu1 | vulnerable |
| Ubuntu | python-cryptography | 22.04 | 3.4.8-1ubuntu2 | vulnerable |
| Ubuntu | python-cryptography | 22.04 | 3.4.8-1ubuntu2.1 | fixed |
| Suse | python-cryptography | linux enterprise micro 5.4 | 3.3.2-150400.16.6.1 | fixed |
| Suse | python-cffi | hpe helion openstack 8 | 1.10.0-4.3.1 | fixed |
| Suse | python-cffi | openstack cloud 8 | 1.10.0-4.3.1 | fixed |
| Suse | python-cffi | openstack cloud crowbar 8 | 1.10.0-4.3.1 | fixed |
| Suse | python-cryptography | linux enterprise high performance computing 15 sp1-ltss | 2.9.2-150100.7.12.1 | fixed |
| Suse | python-cryptography | linux enterprise server 15 sp1-ltss | 2.9.2-150100.7.12.1 | fixed |
| Suse | python-cryptography | linux enterprise server for sap applications 15 sp1 | 2.9.2-150100.7.12.1 | fixed |
| Suse | python-cryptography | openstack cloud 9 | 2.3.1-3.6.6 | fixed |
| Suse | venv-openstack-barbican | openstack cloud 9 | 7.0.1~dev24-3.41.2 | fixed |
| Suse | venv-openstack-cinder | openstack cloud 9 | 13.0.10~dev24-3.42.3 | fixed |
| Suse | venv-openstack-designate | openstack cloud 9 | 7.0.2~dev2-3.39.2 | fixed |
| Suse | venv-openstack-glance | openstack cloud 9 | 17.0.1~dev30-3.37.2 | fixed |
| Suse | venv-openstack-heat | openstack cloud 9 | 11.0.4~dev4-3.41.2 | fixed |
| Suse | venv-openstack-horizon | openstack cloud 9 | 14.1.1~dev11-4.47.2 | fixed |
| Suse | venv-openstack-ironic | openstack cloud 9 | 11.1.5~dev18-4.37.2 | fixed |
| Suse | venv-openstack-keystone | openstack cloud 9 | 14.2.1~dev9-3.40.2 | fixed |
| Suse | venv-openstack-magnum | openstack cloud 9 | 7.2.1~dev1-4.39.3 | fixed |
| Suse | venv-openstack-manila | openstack cloud 9 | 7.4.2~dev60-3.45.2 | fixed |
| Suse | venv-openstack-monasca | openstack cloud 9 | 2.7.1~dev10-3.41.2 | fixed |
| Suse | venv-openstack-monasca-ceilometer | openstack cloud 9 | 1.8.2~dev3-3.39.2 | fixed |
| Suse | venv-openstack-neutron | openstack cloud 9 | 13.0.8~dev209-6.47.2 | fixed |
| Suse | venv-openstack-nova | openstack cloud 9 | 18.3.1~dev92-3.47.2 | fixed |
| Suse | venv-openstack-octavia | openstack cloud 9 | 3.2.3~dev7-4.39.2 | fixed |
| Suse | venv-openstack-sahara | openstack cloud 9 | 9.0.2~dev15-3.39.2 | fixed |
| Suse | venv-openstack-swift | openstack cloud 9 | 2.19.2~dev48-2.34.2 | fixed |
| Suse | python-cryptography | openstack cloud crowbar 9 | 2.3.1-3.6.6 | fixed |
| Suse | python-cryptography | linux enterprise real time 15 sp3 | 3.3.2-150200.19.1 | fixed |
| Suse | python-cryptography | linux enterprise micro 5.1 | 3.3.2-150200.19.1 | fixed |
| Suse | python-cryptography | linux enterprise micro 5.2 | 3.3.2-150200.19.1 | fixed |
| Suse | python-cryptography | hpe helion openstack 8 | 2.0.3-3.14.2 | fixed |
| Suse | venv-openstack-aodh | hpe helion openstack 8 | 5.1.1~dev7-12.44.1 | fixed |
| Suse | venv-openstack-barbican | hpe helion openstack 8 | 5.0.2~dev3-12.47.1 | fixed |
| Suse | venv-openstack-ceilometer | hpe helion openstack 8 | 9.0.8~dev7-12.42.1 | fixed |
| Suse | venv-openstack-cinder | hpe helion openstack 8 | 11.2.3~dev29-14.46.1 | fixed |
| Suse | venv-openstack-designate | hpe helion openstack 8 | 5.0.3~dev7-12.43.1 | fixed |
| Suse | venv-openstack-freezer | hpe helion openstack 8 | 5.0.0.0~xrc2~dev2-10.40.1 | fixed |
| Suse | venv-openstack-glance | hpe helion openstack 8 | 15.0.3~dev3-12.43.1 | fixed |
| Suse | venv-openstack-heat | hpe helion openstack 8 | 9.0.8~dev22-12.49.1 | fixed |
| Suse | venv-openstack-horizon-hpe | hpe helion openstack 8 | 12.0.5~dev6-14.52.1 | fixed |
| Suse | venv-openstack-ironic | hpe helion openstack 8 | 9.1.8~dev8-12.45.1 | fixed |
| Suse | venv-openstack-keystone | hpe helion openstack 8 | 12.0.4~dev11-11.49.1 | fixed |
| Suse | venv-openstack-magnum | hpe helion openstack 8 | 5.0.2_5.0.2_5.0.2~dev31-11.44.1 | fixed |
| Suse | venv-openstack-manila | hpe helion openstack 8 | 5.1.1~dev5-12.49.1 | fixed |
| Suse | venv-openstack-monasca | hpe helion openstack 8 | 2.2.2~dev1-11.49.1 | fixed |
| Suse | venv-openstack-monasca-ceilometer | hpe helion openstack 8 | 1.5.1_1.5.1_1.5.1~dev3-8.40.1 | fixed |
| Suse | venv-openstack-murano | hpe helion openstack 8 | 4.0.2~dev3-12.42.1 | fixed |
| Suse | venv-openstack-neutron | hpe helion openstack 8 | 11.0.9~dev69-13.50.1 | fixed |
| Suse | venv-openstack-nova | hpe helion openstack 8 | 16.1.9~dev92-11.48.1 | fixed |
| Suse | venv-openstack-octavia | hpe helion openstack 8 | 1.0.6~dev3-12.45.1 | fixed |
| Suse | venv-openstack-sahara | hpe helion openstack 8 | 7.0.5~dev4-11.44.1 | fixed |
| Suse | venv-openstack-swift | hpe helion openstack 8 | 2.15.2_2.15.2_2.15.2~dev32-11.35.1 | fixed |
| Suse | venv-openstack-trove | hpe helion openstack 8 | 8.0.2~dev2-11.44.1 | fixed |
| Suse | python-cryptography | openstack cloud 8 | 2.0.3-3.14.2 | fixed |
| Suse | venv-openstack-aodh | openstack cloud 8 | 5.1.1~dev7-12.44.1 | fixed |
| Suse | venv-openstack-barbican | openstack cloud 8 | 5.0.2~dev3-12.47.1 | fixed |
| Suse | venv-openstack-ceilometer | openstack cloud 8 | 9.0.8~dev7-12.42.1 | fixed |
| Suse | venv-openstack-cinder | openstack cloud 8 | 11.2.3~dev29-14.46.1 | fixed |
| Suse | venv-openstack-designate | openstack cloud 8 | 5.0.3~dev7-12.43.1 | fixed |
| Suse | venv-openstack-freezer | openstack cloud 8 | 5.0.0.0~xrc2~dev2-10.40.1 | fixed |
| Suse | venv-openstack-glance | openstack cloud 8 | 15.0.3~dev3-12.43.1 | fixed |
| Suse | venv-openstack-heat | openstack cloud 8 | 9.0.8~dev22-12.49.1 | fixed |
| Suse | venv-openstack-horizon | openstack cloud 8 | 12.0.5~dev6-14.52.1 | fixed |
| Suse | venv-openstack-ironic | openstack cloud 8 | 9.1.8~dev8-12.45.1 | fixed |
| Suse | venv-openstack-keystone | openstack cloud 8 | 12.0.4~dev11-11.49.1 | fixed |
| Suse | venv-openstack-magnum | openstack cloud 8 | 5.0.2_5.0.2_5.0.2~dev31-11.44.1 | fixed |
| Suse | venv-openstack-manila | openstack cloud 8 | 5.1.1~dev5-12.49.1 | fixed |
| Suse | venv-openstack-monasca | openstack cloud 8 | 2.2.2~dev1-11.49.1 | fixed |
| Suse | venv-openstack-monasca-ceilometer | openstack cloud 8 | 1.5.1_1.5.1_1.5.1~dev3-8.40.1 | fixed |
| Suse | venv-openstack-murano | openstack cloud 8 | 4.0.2~dev3-12.42.1 | fixed |
| Suse | venv-openstack-neutron | openstack cloud 8 | 11.0.9~dev69-13.50.1 | fixed |
| Suse | venv-openstack-nova | openstack cloud 8 | 16.1.9~dev92-11.48.1 | fixed |
| Suse | venv-openstack-octavia | openstack cloud 8 | 1.0.6~dev3-12.45.1 | fixed |
| Suse | venv-openstack-sahara | openstack cloud 8 | 7.0.5~dev4-11.44.1 | fixed |
| Suse | venv-openstack-swift | openstack cloud 8 | 2.15.2_2.15.2_2.15.2~dev32-11.35.1 | fixed |
| Suse | venv-openstack-trove | openstack cloud 8 | 8.0.2~dev2-11.44.1 | fixed |
| Suse | python-cryptography | openstack cloud crowbar 8 | 2.0.3-3.14.2 | fixed |
| Suse | python-cffi | openstack cloud 9 | 1.11.5-3.3.1 | fixed |
| Suse | python-cffi | openstack cloud crowbar 9 | 1.11.5-3.3.1 | fixed |
| Suse | python-cryptography | linux enterprise server 12 sp5 | 2.8-7.40.1 | fixed |
| Suse | python-cryptography | linux enterprise server for sap applications 12 sp5 | 2.8-7.40.1 | fixed |
| Suse | python-cffi | linux enterprise server 12 sp5 | 1.11.5-5.19.1 | fixed |
| Suse | python-cffi | linux enterprise server for sap applications 12 sp5 | 1.11.5-5.19.1 | fixed |
| Suse | python-cryptography | linux enterprise micro 5.3 | 3.3.2-150400.16.6.1 | fixed |
| Suse | python-cryptography | linux enterprise module for basesystem 15 sp4 | 3.3.2-150400.16.6.1 | fixed |
| Opensuse | python-cryptography | leap micro 5.3 | 3.3.2-150400.16.6.1 | fixed |
| Opensuse | python-cryptography | leap 15.4 | 3.3.2-150400.16.6.1 | fixed |
| Opensuse | python-cryptography | tumbleweed | 39.0.1-1.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | python-cryptography | source | sid | 38.0.4-3 | not yet assigned | Not reported | [1031049] |
| Debian | python-cryptography | source | forky | 38.0.4-3 | not yet assigned | Not reported | [1031049] |
| Debian | python-cryptography | source | trixie | 38.0.4-3 | not yet assigned | Not reported | [1031049] |
| Debian | python-cryptography | source | bookworm | 38.0.4-3 | not yet assigned | Not reported | [1031049] |
| PyPI | cryptography | PyPI | Not reported | 39.0.1 | Not reported | GHSA-W7PP-M8WF-VJ6R | Not reported |
| PyPI | cryptography | PyPI | Not reported | 39.0.1 | Not reported | Not reported | Not reported |
| PyPI | cryptography | PyPI | Not reported | 94a50a9731f35405f0357fa5f3b177d46a726ab3 | Not reported | Not reported | Not reported |
| Opensuse | python-oci-sdk | rpm | tumbleweed | 2.180.0-1.2 | Not reported | OPENSUSE-SU-2026:12020-1 | Not reported |
| Ubuntu | python-cryptography | deb | pro | 2.1.4-1ubuntu1.4+esm6 | Not reported | UBUNTU-CVE-2023-23931 | Not reported |
| Ubuntu | python-cryptography | deb | 20.04 | 2.8-3ubuntu0.2 | Not reported | UBUNTU-CVE-2023-23931 | Not reported |
| Ubuntu | python-cryptography | deb | 22.04 | 3.4.8-1ubuntu2.1 | Not reported | UBUNTU-CVE-2023-23931 | Not reported |
| Ubuntu | python-cryptography | deb | pro | 2.1.4-1ubuntu1.4+esm6 | Not reported | USN-8776-1 | Not reported |
| Ubuntu | python-cryptography | deb | 26.04 | 46.0.5-1ubuntu2.2 | Not reported | USN-8776-1 | Not reported |
| Alpine | py3-cryptography | apk | 3.23 | 39.0.1-r0 | Not reported | ALPINE-CVE-2023-23931 | Not reported |
| Alpine | py3-cryptography | apk | 3.24 | 39.0.1-r0 | Not reported | ALPINE-CVE-2023-23931 | Not reported |
| Ubuntu | python-cryptography | deb | 20.04 | 2.8-3ubuntu0.2 | Not reported | USN-6539-1 | Not reported |
| Ubuntu | python-cryptography | deb | 22.04 | 3.4.8-1ubuntu2.1 | Not reported | USN-6539-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise micro 5.4 | 3.3.2-150400.16.6.1 | Not reported | SUSE-SU-2023:0722-2 | Not reported |
| Suse | python-cffi | rpm | hpe helion openstack 8 | 1.10.0-4.3.1 | Not reported | SUSE-SU-2023:0839-1 | Not reported |
| Suse | python-cffi | rpm | openstack cloud 8 | 1.10.0-4.3.1 | Not reported | SUSE-SU-2023:0839-1 | Not reported |
| Suse | python-cffi | rpm | openstack cloud crowbar 8 | 1.10.0-4.3.1 | Not reported | SUSE-SU-2023:0839-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise high performance computing 15 sp1-ltss | 2.9.2-150100.7.12.1 | Not reported | SUSE-SU-2023:0737-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise server 15 sp1-ltss | 2.9.2-150100.7.12.1 | Not reported | SUSE-SU-2023:0737-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise server for sap applications 15 sp1 | 2.9.2-150100.7.12.1 | Not reported | SUSE-SU-2023:0737-1 | Not reported |
| Suse | python-cryptography | rpm | openstack cloud 9 | 2.3.1-3.6.6 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-barbican | rpm | openstack cloud 9 | 7.0.1~dev24-3.41.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-cinder | rpm | openstack cloud 9 | 13.0.10~dev24-3.42.3 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-designate | rpm | openstack cloud 9 | 7.0.2~dev2-3.39.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-glance | rpm | openstack cloud 9 | 17.0.1~dev30-3.37.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-heat | rpm | openstack cloud 9 | 11.0.4~dev4-3.41.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-horizon | rpm | openstack cloud 9 | 14.1.1~dev11-4.47.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-ironic | rpm | openstack cloud 9 | 11.1.5~dev18-4.37.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-keystone | rpm | openstack cloud 9 | 14.2.1~dev9-3.40.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-magnum | rpm | openstack cloud 9 | 7.2.1~dev1-4.39.3 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-manila | rpm | openstack cloud 9 | 7.4.2~dev60-3.45.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-monasca | rpm | openstack cloud 9 | 2.7.1~dev10-3.41.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-monasca-ceilometer | rpm | openstack cloud 9 | 1.8.2~dev3-3.39.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-neutron | rpm | openstack cloud 9 | 13.0.8~dev209-6.47.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-nova | rpm | openstack cloud 9 | 18.3.1~dev92-3.47.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-octavia | rpm | openstack cloud 9 | 3.2.3~dev7-4.39.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-sahara | rpm | openstack cloud 9 | 9.0.2~dev15-3.39.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | venv-openstack-swift | rpm | openstack cloud 9 | 2.19.2~dev48-2.34.2 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | python-cryptography | rpm | openstack cloud crowbar 9 | 2.3.1-3.6.6 | Not reported | SUSE-SU-2023:2218-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise real time 15 sp3 | 3.3.2-150200.19.1 | Not reported | SUSE-SU-2023:1763-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise micro 5.1 | 3.3.2-150200.19.1 | Not reported | SUSE-SU-2023:1763-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise micro 5.2 | 3.3.2-150200.19.1 | Not reported | SUSE-SU-2023:1763-1 | Not reported |
| Suse | python-cryptography | rpm | hpe helion openstack 8 | 2.0.3-3.14.2 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-aodh | rpm | hpe helion openstack 8 | 5.1.1~dev7-12.44.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-barbican | rpm | hpe helion openstack 8 | 5.0.2~dev3-12.47.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-ceilometer | rpm | hpe helion openstack 8 | 9.0.8~dev7-12.42.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-cinder | rpm | hpe helion openstack 8 | 11.2.3~dev29-14.46.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-designate | rpm | hpe helion openstack 8 | 5.0.3~dev7-12.43.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-freezer | rpm | hpe helion openstack 8 | 5.0.0.0~xrc2~dev2-10.40.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-glance | rpm | hpe helion openstack 8 | 15.0.3~dev3-12.43.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-heat | rpm | hpe helion openstack 8 | 9.0.8~dev22-12.49.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-horizon-hpe | rpm | hpe helion openstack 8 | 12.0.5~dev6-14.52.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-ironic | rpm | hpe helion openstack 8 | 9.1.8~dev8-12.45.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-keystone | rpm | hpe helion openstack 8 | 12.0.4~dev11-11.49.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-magnum | rpm | hpe helion openstack 8 | 5.0.2_5.0.2_5.0.2~dev31-11.44.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-manila | rpm | hpe helion openstack 8 | 5.1.1~dev5-12.49.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-monasca | rpm | hpe helion openstack 8 | 2.2.2~dev1-11.49.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-monasca-ceilometer | rpm | hpe helion openstack 8 | 1.5.1_1.5.1_1.5.1~dev3-8.40.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-murano | rpm | hpe helion openstack 8 | 4.0.2~dev3-12.42.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-neutron | rpm | hpe helion openstack 8 | 11.0.9~dev69-13.50.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-nova | rpm | hpe helion openstack 8 | 16.1.9~dev92-11.48.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-octavia | rpm | hpe helion openstack 8 | 1.0.6~dev3-12.45.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-sahara | rpm | hpe helion openstack 8 | 7.0.5~dev4-11.44.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-swift | rpm | hpe helion openstack 8 | 2.15.2_2.15.2_2.15.2~dev32-11.35.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-trove | rpm | hpe helion openstack 8 | 8.0.2~dev2-11.44.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | python-cryptography | rpm | openstack cloud 8 | 2.0.3-3.14.2 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-aodh | rpm | openstack cloud 8 | 5.1.1~dev7-12.44.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-barbican | rpm | openstack cloud 8 | 5.0.2~dev3-12.47.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-ceilometer | rpm | openstack cloud 8 | 9.0.8~dev7-12.42.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-cinder | rpm | openstack cloud 8 | 11.2.3~dev29-14.46.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-designate | rpm | openstack cloud 8 | 5.0.3~dev7-12.43.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-freezer | rpm | openstack cloud 8 | 5.0.0.0~xrc2~dev2-10.40.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-glance | rpm | openstack cloud 8 | 15.0.3~dev3-12.43.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-heat | rpm | openstack cloud 8 | 9.0.8~dev22-12.49.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-horizon | rpm | openstack cloud 8 | 12.0.5~dev6-14.52.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-ironic | rpm | openstack cloud 8 | 9.1.8~dev8-12.45.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-keystone | rpm | openstack cloud 8 | 12.0.4~dev11-11.49.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-magnum | rpm | openstack cloud 8 | 5.0.2_5.0.2_5.0.2~dev31-11.44.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-manila | rpm | openstack cloud 8 | 5.1.1~dev5-12.49.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-monasca | rpm | openstack cloud 8 | 2.2.2~dev1-11.49.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-monasca-ceilometer | rpm | openstack cloud 8 | 1.5.1_1.5.1_1.5.1~dev3-8.40.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-murano | rpm | openstack cloud 8 | 4.0.2~dev3-12.42.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-neutron | rpm | openstack cloud 8 | 11.0.9~dev69-13.50.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-nova | rpm | openstack cloud 8 | 16.1.9~dev92-11.48.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-octavia | rpm | openstack cloud 8 | 1.0.6~dev3-12.45.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-sahara | rpm | openstack cloud 8 | 7.0.5~dev4-11.44.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-swift | rpm | openstack cloud 8 | 2.15.2_2.15.2_2.15.2~dev32-11.35.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | venv-openstack-trove | rpm | openstack cloud 8 | 8.0.2~dev2-11.44.1 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | python-cryptography | rpm | openstack cloud crowbar 8 | 2.0.3-3.14.2 | Not reported | SUSE-SU-2023:2144-1 | Not reported |
| Suse | python-cffi | rpm | openstack cloud 9 | 1.11.5-3.3.1 | Not reported | SUSE-SU-2023:0838-1 | Not reported |
| Suse | python-cffi | rpm | openstack cloud crowbar 9 | 1.11.5-3.3.1 | Not reported | SUSE-SU-2023:0838-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise server 12 sp5 | 2.8-7.40.1 | Not reported | SUSE-SU-2023:1767-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise server for sap applications 12 sp5 | 2.8-7.40.1 | Not reported | SUSE-SU-2023:1767-1 | Not reported |
| Suse | python-cffi | rpm | linux enterprise server 12 sp5 | 1.11.5-5.19.1 | Not reported | SUSE-SU-2023:0837-1 | Not reported |
| Suse | python-cffi | rpm | linux enterprise server for sap applications 12 sp5 | 1.11.5-5.19.1 | Not reported | SUSE-SU-2023:0837-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise micro 5.3 | 3.3.2-150400.16.6.1 | Not reported | SUSE-SU-2023:0722-1 | Not reported |
| Suse | python-cryptography | rpm | linux enterprise module for basesystem 15 sp4 | 3.3.2-150400.16.6.1 | Not reported | SUSE-SU-2023:0722-1 | Not reported |
| Opensuse | python-cryptography | rpm | leap micro 5.3 | 3.3.2-150400.16.6.1 | Not reported | SUSE-SU-2023:0722-1 | Not reported |
| Opensuse | python-cryptography | rpm | leap 15.4 | 3.3.2-150400.16.6.1 | Not reported | SUSE-SU-2023:0722-1 | Not reported |
| Opensuse | python-cryptography | rpm | tumbleweed | 39.0.1-1.1 | Not reported | OPENSUSE-SU-2024:12681-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
References
- [https://cert-portal.siemens.com/productcert/csaf/ssa-806742.json]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2023_7096.json]
- [https://osv.dev/vulnerability/ALPINE-CVE-2023-23931]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2023-23931]
- [https://osv.dev/vulnerability/DLA-3331-1]
- [https://osv.dev/vulnerability/DLA-3331-2]
- [https://osv.dev/vulnerability/DLA-3922-1]
- [https://osv.dev/vulnerability/GHSA-w7pp-m8wf-vj6r]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0722-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0722-2]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0737-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0837-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0838-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0839-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:1763-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:1767-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:2144-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:2218-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2023-23931]
- [https://osv.dev/vulnerability/USN-6539-1]
- [https://osv.dev/vulnerability/USN-8776-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:12681-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:12020-1]
- [https://security-tracker.debian.org/tracker/CVE-2023-23931]
- [https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-23931.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2266.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]