Lucene search
K

593 matches found

Tenable Nessus
Tenable Nessus
added 2023/02/21 12:0 a.m.29 views

Debian dla-3331 : python-cryptography - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3331 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3331-2 [email protected] https://www.debian.org/lts/security/...

6.5CVSS6.7AI score0.00688EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2023/02/20 2:29 p.m.37 views

CVE-2023-23931

A vulnerability was found in python-cryptography. In affected versions, Cipher.updateinto would accept Python objects which implement the buffer protocol but provide only immutable buffers. This issue allows immutable objects such as bytes to be mutated, thus violating the fundamental rules of...

6.5CVSS6.7AI score0.00688EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:27 a.m.1 views

SUSE CVE-2018-10903

A flaw was found in python-cryptography versions between =1.9.0 and 2.3. The finalizewithtag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalizewithtag an attacker could craft an invalid payload with a shortened tag e.g. 1 byte suc...

5.3CVSS6.5AI score0.00239EPSS
Exploits0References20
OSV
OSV
added 2023/02/07 9:15 p.m.2 views

AZL-13353 CVE-2023-23931 affecting package python-cryptography for versions less than 3.3.2-4

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

6.5CVSS6.7AI score0.00688EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2022/11/19 12:0 a.m.39 views

SUSE SLED15 / SLES15 Security Update : python-cryptography, python-cryptography-vectors (SUSE-SU-2022:4044-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4044-1 advisory. - A flaw was found in python-cryptography versions between =1.9.0 and 2.3. The finalizewithtag API did not enforce a...

7.5CVSS6.6AI score0.00239EPSS
Exploits0References7
OSV
OSV
added 2022/11/17 8:7 a.m.4 views

SUSE-SU-2022:4044-1 Security update for python-cryptography, python-cryptography-vectors

This update for python-cryptography, python-cryptography-vectors fixes the following issues: - Update in SLE-15 bsc1177083, jscPM-2730, jscSLE-18312 - Refresh patches for new version - Update in SLE-15 bsc1176785, jscECO-3105, jscPM-2352 - update to 2.9.2 2.9.2 - 2020-04-22 - Updated the macOS...

7.5CVSS7.2AI score0.00239EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2022/11/17 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2022:4044-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00239EPSS
Exploits0References7
Rockylinux
Rockylinux
added 2022/11/15 6:13 a.m.14 views

python-cryptography bug fix and enhancement update

An update is available for python-cryptography. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...

2AI score
Exploits0
OSV
OSV
added 2022/07/11 10:44 a.m.8 views

SUSE-RU-2022:2355-1 Recommended update for python-cryptography

This update for python-cryptography fixes the following issues: python-cryptography was updated to 3.3.2. update to 3.3.0: BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit to 1024-bit 8 byte to 128 byte initialization vectors. This change is to conform with an upcoming OpenSSL releas...

5.9CVSS7.4AI score0.0076EPSS
Exploits0References3
Oracle linux
Oracle linux
added 2022/06/30 12:0 a.m.33 views

pcs security update

0.11.1-10.el90.1 - Updated bundled rubygems: sinatra, rack-protection - Resolves: rhbz2081333 0.11.1-10 - Fixed snmp client - Fixed translating resource roles in colocation constraint - Resolves: rhbz2048640 0.11.1-9 - Fixed cluster destroy in web ui - Fixed covscan issue in web ui - Resolves:...

7.5CVSS7.9AI score0.00601EPSS
Exploits0
Rockylinux
Rockylinux
added 2022/05/17 6:15 a.m.7 views

new packages: python-cryptography

An update is available for python-cryptography. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...

2AI score
Exploits0
Oracle linux
Oracle linux
added 2022/05/17 12:0 a.m.102 views

python39:3.9 and python39-devel:3.9 security update

modwsgi 4.7.1-4 - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz1877430 4.7.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora33MassRebuild 4.7.1-2 - Rebuilt for Python 3.9 4.7.1-1 - update to 4.7.1 1721376 python39 3.9.7-1 - Update to 3.9.7 Resolves: rhbz2003102...

8.2CVSS0.1AI score0.05428EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.71 views

AlmaLinux 8 : python-cryptography (ALSA-2021:1608)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2021:1608 advisory. - python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS1 v1.5 ciphertext...

9.1CVSS7.6AI score0.01575EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.11 views

Mageia: Security Advisory (MGASA-2015-0460)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.18 views

Mageia: Security Advisory (MGASA-2021-0129)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.3AI score0.01575EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.15 views

Mageia: Security Advisory (MGASA-2018-0429)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.00239EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.17 views

Mageia: Security Advisory (MGASA-2020-0438)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.7AI score0.0076EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.12 views

Mageia: Security Advisory (MGASA-2016-0377)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.0165EPSS
Exploits0References5
Oracle linux
Oracle linux
added 2021/11/16 12:0 a.m.58 views

python39:3.9 and python39-devel:3.9 security update

modwsgi 4.7.1-4 - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz1877430 4.7.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora33MassRebuild 4.7.1-2 - Rebuilt for Python 3.9 4.7.1-1 - update to 4.7.1 1721376 numpy 1.19.4-3 - Adjusted the postun scriptlets to enable...

9.8CVSS7.5AI score0.02048EPSS
Exploits7
Rockylinux
Rockylinux
added 2021/11/09 9:22 a.m.9 views

python-cryptography bug fix and enhancement update

An update is available for python-cryptography. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...

2.1AI score
Exploits0
Rows per page
Query Builder