Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0901-1

Опубликовано: 23 июн. 2021
Источник: suse-cvrf

Описание

Security update for python-rsa

This update for python-rsa fixes the following issues:

  • CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext (bsc#1172389)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
python2-rsa-3.4.2-lp152.4.3.1
python3-rsa-3.4.2-lp152.4.3.1

Ссылки

Описание

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

Затронутые продукты
openSUSE Leap 15.2:python2-rsa-3.4.2-lp152.4.3.1
openSUSE Leap 15.2:python3-rsa-3.4.2-lp152.4.3.1
Ссылки