129 matches found
python-ecdsa
Pure-Python ECDSA and ECDH 这是一个易于使用的 ECC(椭圆曲线密码学)实现,支持 ECDSA(椭圆曲线数字签名算法)、EdDSA(爱德华曲线数字签名算法)和 ECDH(椭圆曲线 Diffie-Hellman),完全用纯 Python 实现,并以 MIT 许可证发布。使用此库,您可以快速创建密钥对(签名密钥和验证密钥)、对消息签名并验证签名。您还可以基于交换的公钥协商出共享密钥。密钥和签名都非常短,易于处理并集成到其他协议中。 注意:此库不应在生产环境中使用,详情请参阅Security。 特性 此库为五种流行的 NIST“Suite B”GFp( 素数域...
CVE-2026-33936
CVE-2026-33936 ecdsa PyPI 中的拒绝服务漏洞 介绍 我在 python-ecdsa 中识别并负责任地披露了一个 中等严重性 的漏洞,这是一个广泛使用的 Python 加密库,过去一个月有 4780 万次下载 。 我在审查 python-ecdsa 时发现了这个问题,心中带着一个非常具体的问题: 如果格式错误的 DER 虚假地声称其长度,而解析器过度信任该长度,会发生什么? 在这个案例中,这个问题引出了一个真实漏洞。 ecdsa.der 中的 DER...
EulerOS 2.0 SP11 : python-ecdsa (EulerOS-SA-2026-3089)
According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...
EulerOS 2.0 SP12 : python-ecdsa (EulerOS-SA-2026-2556)
According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...
EulerOS 2.0 SP12 : python-ecdsa (EulerOS-SA-2026-2616)
According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...
Security update for python-ecdsa (moderate)
openSUSE security update: security update for python-ecdsa ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21078-1 Rating: moderate References: bsc1261009 Cross-References: CVE-2026-33936 CVSS scores: CVE-2026-33936 SUSE : 5.3...
EulerOS 2.0 SP15 : python-ecdsa (EulerOS-SA-2026-2460)
According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...
EulerOS 2.0 SP15 : python-ecdsa (EulerOS-SA-2026-2501)
According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...
SUSE-SU-2026:22158-1 Security update for python-ecdsa
This update for python-ecdsa fixes the following issue: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009...
OPENSUSE-SU-2026:21078-1 Security update for python-ecdsa
This update for python-ecdsa fixes the following issue: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009...
EulerOS 2.0 SP13 : python-ecdsa (EulerOS-SA-2026-2309)
According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...
python-ecdsa DER Parser Security Test Suite
This Python script is a security test and validation suite for the python-ecdsa library, focused on detecting potential DER Distinguished Encoding Rules parsing anomalies that may relate to CVE-2026-33936...
SUSE SLED15 / SLES15 Security Update : python-ecdsa (SUSE-SU-2026:1608-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:1608-1 advisory. - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the...
Security update for python-ecdsa
This update for python-ecdsa fixes the following issues: CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...
SUSE-SU-2026:1608-1 Security update for python-ecdsa
This update for python-ecdsa fixes the following issues: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-ecdsa (SUSE-SU-2026:1436-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:1436-1 advisory. - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be rais...
Security update for python-ecdsa
This update for python-ecdsa fixes the following issues: CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...
SUSE-SU-2026:1436-1 Security update for python-ecdsa
This update for python-ecdsa fixes the following issues: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009...
OESA-2026-1839 python-ecdsa security update
This is an easy-to-use implementation of ECDSA cryptography Elliptic Curve Digital Signature Algorithm, implemented purely in Python, released under the MIT license. With this library, you can quickly create keypairs signing key and verifying key, sign messages, and verify the signatures. The key...
CVE-2026-33936 affecting package python-ecdsa for versions less than 0.19.2-1
CVE-2026-33936 affecting package python-ecdsa for versions less than 0.19.2-1. An upgraded version of the package is available that resolves this issue...