Описание
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| python-cryptography | not-affected | package |
Примечания
https://github.com/pyca/cryptography/issues/9207
https://github.com/pyca/cryptography/pull/9208
Introduced after: https://github.com/pyca/cryptography/commit/aca8de845e751dd45fe4e48f8492f357d34d1861 (40.0.0)
Fixed by: https://github.com/pyca/cryptography/commit/1ca7adc97b76a9dfbd3d850628b613eb93b78fc3 (main)
Fixed by: https://github.com/pyca/cryptography/commit/e190ef190525999d1f599cf8c3aef5cb7f3a8bc4 (41.0.2)
Связанные уязвимости
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
