Fedora 25 : python-cryptography / python-cryptography-vectors (2016-2d90e27e50)

Rebase to 1.5.3 to fix CVE-2016-9243 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

[SECURITY] Fedora 25 Update: python-cryptography-vectors-1.5.3-1.fc25

Test vectors for the cryptography package. The only purpose of this package is to be a building requirement for python-cryptography, otherwise it has no use. Don=EF=BF=BD=EF=BF=BD=EF=BF =BDt install it unless you really know what you are doing...

[SECURITY] Fedora 25 Update: python-cryptography-1.5.3-3.fc25

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...

[SECURITY] Fedora 24 Update: python-cryptography-vectors-1.5.3-1.fc24

Test vectors for the cryptography package. The only purpose of this package is to be a building requirement for python-cryptography, otherwise it has no use. Don=EF=BF=BD=EF=BF=BD=EF=BF =BDt install it unless you really know what you are doing...

[SECURITY] Fedora 24 Update: python-cryptography-1.5.3-3.fc24

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...

[SECURITY] Fedora 23 Update: python-cryptography-1.5.3-3.fc23

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...

[SECURITY] Fedora 23 Update: python-cryptography-vectors-1.5.3-1.fc23

Test vectors for the cryptography package. The only purpose of this package is to be a building requirement for python-cryptography, otherwise it has no use. Don=EF=BF=BD=EF=BF=BD=EF=BF =BDt install it unless you really know what you are doing...

Observium Multiple Vulnerabilities

Observium is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:observium:networkmonitor"; if...

Updated python-cryptography package fixes security vulnerability

Fixed a bug where HKDF would return an empty byte-string if used with a length less than algorithm.digestsize. CVE-2016-9243...

MGASA-2016-0377 Updated python-cryptography package fixes security vulnerability

Fixed a bug where HKDF would return an empty byte-string if used with a length less than algorithm.digestsize. CVE-2016-9243...

Python Cryptography Security Bypass Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security bypass vulnerability in Python Cryptography versions prior to 1.5.3 allows attackers to bypass...

Signal Audit Reveals Protocol Cryptographically Sound

Academics from three different continents recently audited the popular end-to-end encryption app Signal and their findings, for the most part, are encouraging. The protocol, which boasts over a billion users, including those via apps such as Facebook, WhatsApp and Google’s Allo services, has no...

CVE-2016-9243

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digestsize...

PT-2016-7715 · Python Cryptography Authority +2 · Cryptography +2

Name of the Vulnerable Software and Affected Versions: cryptography versions prior to 1.5.3 Description: The issue arises when HKDF in cryptography is used with a length less than algorithm.digest size, resulting in an empty byte-string being returned. Recommendations: For versions prior to 1.5.3...

CVE-2016-9243

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digestsize...

UBUNTU-CVE-2016-9243

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digestsize...

py-cryptography -- vulnerable HKDF key generation

Alex Gaynor reports: Fixed a bug where HKDF would return an empty byte-string if used with a length less than algorithm.digestsize...

Sophos Web Appliance 4.2.1.3 Privilege Escalation Vulnerability

Sophos Web Appliance version 4.2.1.3 suffers from a privilege escalation vulnerability. An unprivileged user can obtain an MD5 hash of the administrator password which can then be used to discover the plain-text password. Title: Sophos Web Appliance Privilege Escalation Advisory ID: KL-001-2016-0...

Sophos Web Appliance 4.2.1.3 Privilege Escalation

KL-001-2016-008 : Sophos Web Appliance Privilege Escalation Title: Sophos Web Appliance Privilege Escalation Advisory ID: KL-001-2016-008 Publication Date: 2016.11.03 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2016-008.txt 1. Vulnerability Details Affected Vendor: Soph...

RedHat Update for libreswan RHSA-2016:2603-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...