ELSA-2023-0952: python-setuptools security update (MODERATE)

ELSA-2023-0835: python-setuptools security update (MODERATE)

Уязвимость инструментов установки пакетов Python Packaging Authority, связанная с некорректным регулярным выражением, позволяющая нарушителю вызывать отказ в обслуживании

Уязвимость python-setuptools

ALT-PU-2022-3087: package `python3-module-setuptools` update to version 65.5.1-alt1

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.

Cipher.update_into can corrupt memory in pyca cryptography

cryptography is a package designed to expose cryptographic primitives ...

ALT-PU-2024-15879: package `python3-module-setuptools` update to version 57.4.0-alt1.p10.1

Security update for python-cryptography

Security update for python-cryptography

Security update for python-cffi

Security update for python-cryptography

Security update for python-cryptography

Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf

ELSA-2023-7096: python-cryptography security update (MODERATE)

ELSA-2023-6615: python-cryptography security update (MODERATE)

Уязвимость функции Cipher.update_into пакета cryptography интерпретатора языка программирования Python, позволяющая нарушителю оказать воздействие на целостность и доступность выходных данных