(RHSA-2018:3600) Moderate: python-cryptography security update

2018-11-14T02:57:38
ID RHSA-2018:3600
Type redhat
Reporter RedHat
Modified 2018-11-14T03:00:34

Description

The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers.

Security Fix(es):

  • python-cryptography: GCM tag forgery via truncated tag in finalize_with_tag API (CVE-2018-10903)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.