Microsoft Windows Containers DP API Cryptography Flaw

Certitude Security Advisory - CSA-2021-002 PRODUCT : Windows Containers VENDOR : Microsoft SEVERITY : High AFFECTED VERSION : Windows 10, Windows Server IDENTIFIERS : CVE-2021-1645 PATCH VERSION : KB4598229, KB4598230, KB4598242, KB4598243 FOUND BY : Marc Nimmerrichter, Certitude Lab Introduction...

CVE-2020-4831

IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 189965...

Updated python-cryptography package fixes a security vulnerability

In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow CVE-2020-36242...

MGASA-2021-0129 Updated python-cryptography package fixes a security vulnerability

In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow CVE-2020-36242...

Security Bulletin: IBM Watson OpenScale on Cloud Pak for Data is impacted by CVE-2020-25659

Summary IBM Watson OpenScale on Cloud Pak for Data has addressed CVE-2020-25659. Vulnerability Details CVEID: CVE-2020-25659 DESCRIPTION: python-cryptography could allow a remote attacker to obtain sensitive information, caused by a Bleichenbacher timing attack. By sending a specially-crafted...

Newest Intel Side-Channel Attack Sniffs Out Sensitive Data

Intel processors are vulnerable to a new side-channel attack, which researchers said can allow attackers to steal sensitive information such as encryption keys or passwords. Unlike previous side-channel attacks, this attack does not rely on sharing memory, cache sets and other former tactics...

SUSE SLES15 Security Update : python-cryptography (SUSE-SU-2021:0696-1)

This update for python-cryptography fixes the following issues : CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066. Note that Tenable Network Security has extracted the preceding description blo...

SUSE-SU-2021:0696-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066...

CVE-2020-36242 affecting package python-cryptography 2.3.1-4

CVE-2020-36242 affecting package python-cryptography 2.3.1-4. An upgraded version of the package is available that resolves this issue...

SUSE SLES12 Security Update : python-cryptography (SUSE-SU-2021:0675-1)

This update for python-cryptography fixes the following issues : CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066. Note that Tenable Network Security has extracted the preceding description blo...

SUSE-SU-2021:0675-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066...

SUSE-SU-2021:0669-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066...

SUSE-SU-2021:0668-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066...

SUSE SLED15 / SLES15 Security Update : python-cryptography (SUSE-SU-2021:0594-1)

This update for python-cryptography fixes the following issues : CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066. Note that Tenable Network Security has extracted the preceding description blo...

openSUSE Security Update : python-cryptography (openSUSE-2021-349)

This update for python-cryptography fixes the following issues : - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066. This update was imported from the SUSE:SLE-15-SP2:Update update project. C...

[ASA-202102-36] python-cryptography: incorrect calculation

Arch Linux Security Advisory ASA-202102-36 ========================================== Severity: Medium Date : 2021-02-27 CVE-ID : CVE-2020-36242 Package : python-cryptography Type : incorrect calculation Remote : No Link : https://security.archlinux.org/AVG-1541 Summary ======= The package...

OPENSUSE-SU-2021:0349-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066. This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for python-cryptography (important)

openSUSE Security Update: Security update for python-cryptography Announcement ID: openSUSE-SU-2021:0349-1 Rating: important References: 1182066 Cross-References: CVE-2020-36242 CVSS scores: CVE-2020-36242 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2020-36242 SUSE: 7.5...

CVE-2021-3406

Summary (CVE-2021-3406) : A flaw in Keylime 5.8.1 and older affects the Keylime agent and registrar, breaking the cryptographic chain of trust from the Endorsement Key certificate to agent attestations. Public sources (NVD/NVD-derived feeds, Fedora advisories) describe a remote-execution impact w...

SUSE-SU-2021:0594-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow bsc1182066...