(RHSA-2018:3600) Moderate: python-cryptography security update

ID RHSA-2018:3600
Type redhat
Reporter RedHat
Modified 2018-11-14T03:00:34


The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers.

Security Fix(es):

  • python-cryptography: GCM tag forgery via truncated tag in finalize_with_tag API (CVE-2018-10903)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.