Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-FU-2024:1448-1

Опубликовано: 26 апр. 2024
Источник: suse-cvrf

Описание

Feature update for python-M2Crypto

This update for python-M2Crypto fixes the following issue:

  • Build for modern python stack
  • Adds python311-M2Crypto

Список пакетов

Image server-image
python311-M2Crypto-0.40.0-150400.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
python-M2Crypto-doc-0.40.0-150400.3.9.1
python311-M2Crypto-0.40.0-150400.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
python-M2Crypto-doc-0.40.0-150400.3.9.1
python311-M2Crypto-0.40.0-150400.3.9.1
SUSE Linux Enterprise Module for Python 3 15 SP5
python-M2Crypto-doc-0.40.0-150400.3.9.1
python311-M2Crypto-0.40.0-150400.3.9.1
SUSE Linux Enterprise Server 15 SP4-LTSS
python-M2Crypto-doc-0.40.0-150400.3.9.1
python311-M2Crypto-0.40.0-150400.3.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
python-M2Crypto-doc-0.40.0-150400.3.9.1
python311-M2Crypto-0.40.0-150400.3.9.1
openSUSE Leap 15.5
python-M2Crypto-doc-0.40.0-150400.3.9.1
python311-M2Crypto-0.40.0-150400.3.9.1

Описание

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.


Затронутые продукты
Image server-image:python311-M2Crypto-0.40.0-150400.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python-M2Crypto-doc-0.40.0-150400.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-M2Crypto-0.40.0-150400.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python-M2Crypto-doc-0.40.0-150400.3.9.1

Ссылки