[SECURITY] Fedora 24 Update: python-jwcrypto-0.3.2-1.fc24

Implements JWK,JWS,JWE specifications using python-cryptography...

[SECURITY] Fedora 25 Update: python-jwcrypto-0.3.2-1.fc25

Implements JWK,JWS,JWE specifications using python-cryptography...

Fedora 23 : python-cryptography-1.0.2-2.fc23 / python-cryptography-vectors-1.0.2-2.fc23 (2015-ac07ff875b)

Security fix for undefined behavior could lead to a crash Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

RSA package for Python spoofing vulnerability

RSA package for Python is a Python RSA implementation that supports encryption and decryption, signing and verifying signatures, key generation and more. The 'verify' function of Python-RSA has a security vulnerability that allows a remote attacker to forge signatures using special signature...

Updated python-cryptography packages fix security vulnerability

The OpenSSL backend prior to 1.0.2 made extensive use of assertions to check response codes where our tests could not trigger a failure. However, when Python is run with -O these asserts are optimized away. If a user ran Python with this flag and got an invalid response code this could result in...

[SECURITY] Fedora 23 Update: python-cryptography-vectors-1.0.2-2.fc23

Test vectors for the cryptography package. The only purpose of this package is to be a building requirement for python-cryptography, otherwise it has no use. Don=E2=80=99t install it unle ss you really know what you are doing...

[SECURITY] Fedora 23 Update: python-cryptography-1.0.2-2.fc23

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...

PyCrypto: Execution of arbitrary code

Background PyCrypto is the Python Cryptography Toolkit. Description Mike Wiacek of the Google Security Team reported a buffer overflow in the ARC2 module when processing a large ARC2 key length. Impact A remote attacker could entice a user or automated system to decrypt an ARC2 stream in an...