Описание
Security update for python-rsa
This update for python-rsa fixes the following issues:
- CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext (bsc#1172389)
Список пакетов
openSUSE Leap 15.3
python2-rsa-3.4.2-3.4.1
python3-rsa-3.4.2-3.4.1
Ссылки
- E-Mail link for openSUSE-SU-2021:2008-1
- SUSE Security Ratings
- SUSE Bug 1172389
- SUSE CVE CVE-2020-13757 page
Описание
Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).
Затронутые продукты
openSUSE Leap 15.3:python2-rsa-3.4.2-3.4.1
openSUSE Leap 15.3:python3-rsa-3.4.2-3.4.1
Ссылки
- CVE-2020-13757
- SUSE Bug 1172389