CVE-2024-37305 Buffer overflow in deserialization in oqs-provider

oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum algorithms from liboqs. Flaws have been identified in the way oqs-provider handles lengths decoded with DECODEUINT32 at the start of...

CVE-2024-37305 Buffer overflow in deserialization in oqs-provider

oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum algorithms from liboqs. Flaws have been identified in the way oqs-provider handles lengths decoded with DECODEUINT32 at the start of...

CVE-2024-37305

CVE-2024-37305 affects the oqs-provider (OpenSSL 3 post-quantum provider) where lengths decoded with DECODE_UINT32 at the start of serialized hybrid keys/signatures are unchecked, enabling out-of-bounds memory reads/writes that can crash or leak information. The issue does not affect plain/non-hy...

OPENSUSE-SU-2024:11223-1 python36-cryptography-3.3.2-2.4 on GA media

These are all security issues fixed in the python36-cryptography-3.3.2-2.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13078-1 python310-cryptography-41.0.2-2.1 on GA media

These are all security issues fixed in the python310-cryptography-41.0.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13472-1 python310-cryptography-41.0.7-1.1 on GA media

These are all security issues fixed in the python310-cryptography-41.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12681-1 python310-cryptography-39.0.1-1.1 on GA media

These are all security issues fixed in the python310-cryptography-39.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12479-1 python310-cryptography-38.0.3-1.1 on GA media

These are all security issues fixed in the python310-cryptography-38.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13819-1 python310-cryptography-42.0.5-1.1 on GA media

These are all security issues fixed in the python310-cryptography-42.0.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13710-1 python310-cryptography-42.0.4-1.1 on GA media

These are all security issues fixed in the python310-cryptography-42.0.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12480-1 python310-cryptography-vectors-38.0.3-1.1 on GA media

These are all security issues fixed in the python310-cryptography-vectors-38.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-21988

StorageGRID formerly StorageGRID Webscale versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM attacks due to a vulnerability in the SSH cryptographic implementation...

RLSA-2024:2985 Moderate: python39:3.9 and python39-devel:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python39:3.9 and python39-devel:3.9 security update

An update is available for python-pluggy, module.python-iniconfig, module.python-psycopg2, module.python-more-itertools, module.python3x-pip, module.python3x-setuptools, python-requests, python-psutil, numpy, module.python-ply, module.python-psutil, module.python-pycparser, module.python-cffi,...

libreswan bug fix and enhancement update

An update is available for libreswan. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the...

Rocky Linux 8 : python39:3.9 and python39-devel:3.9 (RLSA-2024:2985)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2985 advisory. pypa-setuptools: Regular Expression Denial of Service ReDoS in packageindex.py CVE-2022-40897 python-cryptography: memory corruption via immutable objec...

CVE-2024-34113

ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawed implementation that compromises the...

CVE-2024-34113

ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawed implementation that compromises the...

CVE-2024-34113 ColdFusion | Weak Cryptography for Passwords (CWE-261)

ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawed implementation that compromises the...

CVE-2024-34113

Adobe ColdFusion is affected by CVE-2024-34113 (Weak Cryptography for Passwords) affecting ColdFusion 2023u7, 2021u13 and earlier. The issue stems from insufficiently strong cryptographic algorithms or flawed implementation used for password protection, enabling potential decryption or guessing o...