Описание
Security update for python-cryptography
This update for python-cryptography fixes the following issues:
- CVE-2020-25659: Attempted to mitigate Bleichenbacher attacks on RSA decryption (bsc#1178168).
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Список пакетов
openSUSE Leap 15.2
python2-cryptography-2.8-lp152.2.3.1
python3-cryptography-2.8-lp152.2.3.1
Ссылки
- E-Mail link for openSUSE-SU-2020:2173-1
- SUSE Security Ratings
- SUSE Bug 1178168
- SUSE CVE CVE-2020-25659 page
Описание
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
Затронутые продукты
openSUSE Leap 15.2:python2-cryptography-2.8-lp152.2.3.1
openSUSE Leap 15.2:python3-cryptography-2.8-lp152.2.3.1
Ссылки
- CVE-2020-25659
- SUSE Bug 1178168
- SUSE Bug 1183152
- SUSE Bug 1218043