7842 matches found
USN-3138-1: python-cryptography vulnerability
Markus Döring discovered that python-cryptography incorrectly handled certain HKDF lengths. This could result in python-cryptography returning an empty string instead of the expected derived key...
USN-3138-1 python-cryptography vulnerability
Markus Döring discovered that python-cryptography incorrectly handled certain HKDF lengths. This could result in python-cryptography returning an empty string instead of the expected derived key...
mod_nss security update
CentOS Errata and Security Advisory CESA-2016:2602 An update for modnss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
Fedora 24 : python-cryptography / python-cryptography-vectors (2016-d3a2b640ce)
Rebase to 1.5.3 to fix CVE-2016-9243 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Fedora 25 : python-cryptography / python-cryptography-vectors (2016-2d90e27e50)
Rebase to 1.5.3 to fix CVE-2016-9243 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Fedora 23 : python-cryptography / python-cryptography-vectors (2016-e77c8c1f3b)
Rebase to 1.5.3 to fix CVE-2016-9243 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
[SECURITY] Fedora 25 Update: python-cryptography-vectors-1.5.3-1.fc25
Test vectors for the cryptography package. The only purpose of this package is to be a building requirement for python-cryptography, otherwise it has no use. Don=EF=BF=BD=EF=BF=BD=EF=BF =BDt install it unless you really know what you are doing...
[SECURITY] Fedora 25 Update: python-cryptography-1.5.3-3.fc25
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...
[SECURITY] Fedora 24 Update: python-cryptography-1.5.3-3.fc24
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...
[SECURITY] Fedora 24 Update: python-cryptography-vectors-1.5.3-1.fc24
Test vectors for the cryptography package. The only purpose of this package is to be a building requirement for python-cryptography, otherwise it has no use. Don=EF=BF=BD=EF=BF=BD=EF=BF =BDt install it unless you really know what you are doing...
[SECURITY] Fedora 23 Update: python-cryptography-1.5.3-3.fc23
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...
[SECURITY] Fedora 23 Update: python-cryptography-vectors-1.5.3-1.fc23
Test vectors for the cryptography package. The only purpose of this package is to be a building requirement for python-cryptography, otherwise it has no use. Don=EF=BF=BD=EF=BF=BD=EF=BF =BDt install it unless you really know what you are doing...
Observium Multiple Vulnerabilities
Observium is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:observium:networkmonitor"; if...
MGASA-2016-0377 Updated python-cryptography package fixes security vulnerability
Fixed a bug where HKDF would return an empty byte-string if used with a length less than algorithm.digestsize. CVE-2016-9243...
Updated python-cryptography package fixes security vulnerability
Fixed a bug where HKDF would return an empty byte-string if used with a length less than algorithm.digestsize. CVE-2016-9243...
Python Cryptography Security Bypass Vulnerability
Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security bypass vulnerability in Python Cryptography versions prior to 1.5.3 allows attackers to bypass...
Signal Audit Reveals Protocol Cryptographically Sound
Academics from three different continents recently audited the popular end-to-end encryption app Signal and their findings, for the most part, are encouraging. The protocol, which boasts over a billion users, including those via apps such as Facebook, WhatsApp and Google’s Allo services, has no...
CVE-2016-9243
HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digestsize...
