p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in python-cryptography · Seite 2

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für python-cryptography: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 23

  1. RLSA-2021:1879

    Mittel · CVSS 6.5Korrektur verfügbar

    Moderate: python38:3.8 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: CRLF injection via HTTP request method in httplib/http.client (CVE-2020-26116) * python-lxml: mXSS due to the use of improper parser (CVE-2020-27783) * python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c (CVE-2021-3177) For more details about the security issue(s), including the impact, a CVSS score, acknowledgme

    python-cryptography python-cryptographyBetriebssysteme
    • Auf 0:2.8-3.module+el8.4.0+570+c2eaf144 aktualisieren
    • Auf 0:2.8-3.module+el8.5.0+672+ab6eb015 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. RLSA-2021:1608

    Hoch · CVSS 8.2Korrektur verfügbar

    Moderate: python-cryptography security, bug fix, and enhancement update

    The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers. The following packages have been upgraded to a later upstream version: python-cryptography (3.2.1). (BZ#1873581, BZ#1891947) Security Fix(es): * python-cryptography: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659) * python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads could result in an integer overflow and lead to buffer overflows (CVE-2020-36242) For more details about the secu

    python-cryptographyBetriebssysteme
    • Auf 0:3.2.1-4.el8 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. RLSA-2020:4641

    Kritisch · CVSS 9.8Korrektur verfügbar

    Moderate: python38:3.8 security, bug fix, and enhancement update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following packages have been upgraded to a later upstream version: python38 (3.8.3). (BZ#1847416) Security Fix(es): * PyYAML: command execution through python/object/apply constructor in FullLoader (CVE-2019-20477) * python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907) * PyYAML: arbitrary command execution through python/objec

    python-cryptography python-cryptographyBetriebssysteme
    • Auf 0:2.8-3.module+el8.4.0+570+c2eaf144 aktualisieren
    • Auf 0:2.8-3.module+el8.5.0+672+ab6eb015 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →