Описание
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| python-cryptography | not-affected | package |
Примечания
https://github.com/pyca/cryptography/issues/9207
https://github.com/pyca/cryptography/pull/9208
Introduced after: https://github.com/pyca/cryptography/commit/aca8de845e751dd45fe4e48f8492f357d34d1861 (40.0.0)
Fixed by: https://github.com/pyca/cryptography/commit/1ca7adc97b76a9dfbd3d850628b613eb93b78fc3 (main)
Fixed by: https://github.com/pyca/cryptography/commit/e190ef190525999d1f599cf8c3aef5cb7f3a8bc4 (41.0.2)
EPSS
Связанные уязвимости
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
EPSS