openSUSE Security Update : python-cryptography (openSUSE-2019-857)

This update for python-cryptography fixes the following issues : - CVE-2018-10903: The finalizewithtag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalizewithtag an attacker could craft an invalid payload with a shortened tag e.g. ...

Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities (CVE-2018-1966, CVE-2018-1964, CVE-2018-1965)

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerabilities due to an application error that causes an error message to contain sensitive information, embedded code by untrusted websites that can allow authorized users to unknowingly alter the...

ROBOT Attack

Bouncy Castle Cryptography API is vulnerable to ROBOT attack. The vulnerability exists due to the usage of simple RSA CMS signatures without signed attributes...

CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

ALPINE-CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

DEBIAN-CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

UBUNTU-CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

Code injection

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

CVE-2017-1713

IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134632...

Code injection

IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134632...

CVE-2017-1713

IBM InfoSphere Streams 4.2.1 is affected by CVE-2017-1713 due to use of weaker-than-expected cryptographic algorithms/weak ciphers when TLS is enabled. This could allow an attacker to decrypt highly sensitive information. The IBM bulletin for this CVE specifies affected product/version: IBM Strea...

CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

CVE-2019-9898

PuTTY before 0.71 is affected by CVE-2019-9898 (potential recycling of random numbers in cryptography). Debian/OpenSUSE/Fedora advisories show an upstream 0.71 release fixed CVE-2019-9898 among others; remediation is upgrading PuTTY to 0.71 or newer. Impact includes cryptographic randomness reuse...

CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

PuTTY Random Number Reuse Vulnerability

PuTTY is a free implementation of SSH and Telnet for Windows and Unix platforms and an xterm terminal emulator. A random number reuse vulnerability exists in PuTTY versions prior to 0.71 used in cryptography. An attacker can exploit this vulnerability to potentially recycle random numbers used in...

openssl security update

CentOS Errata and Security Advisory CESA-2019:0483 An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

PuTTY -- security fixes in new release

The PuTTY team reports: New in 0.71: Security fixes found by an EU-funded bug bounty programme: + a remotely triggerable memory overwrite in RSA key exchange, which can occur before host key verification + potential recycling of random numbers used in cryptography + on Unix, remotely triggerable...