121 matches found
Security update for python-M2Crypto
This update for python-M2Crypto fixes the following issue: CVE-2026-109087: SSL.Checker subjectAltName hostname injection bsc1285047. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run t...
SUSE-SU-2026:5204-1 Security update for python-M2Crypto
This update for python-M2Crypto fixes the following issue: - CVE-2026-109087: SSL.Checker subjectAltName hostname injection bsc1285047...
python-M2Crypto-doc-0.50.0-2.1 on GA media (moderate)
python-M2Crypto-doc-0.50.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:12136-1 Rating: moderate Cross-References: CVE-2026-109087 CVSS scores: CVE-2026-109087 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-109087 SUSE : 9.1...
OPENSUSE-SU-2026:12136-1 python-M2Crypto-doc-0.50.0-2.1 on GA media
These are all security issues fixed in the python-M2Crypto-doc-0.50.0-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-115365
Name of the Vulnerable Software and Affected Versions python-M2Crypto versions prior to 0.50.0-2.1 Description An issue exists in the SSL.Checker where a hostname injection is possible via the subjectAltName parameter. Subject Alternative Name SAN is an extension of the X.509 certificate that...
PYSEC-2026-1595 m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657
A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data...
m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657
A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data...
dj-saml-idp (>=0.21.2, <=0.22.0), django-saml-idp (>=0.23.0, <=1.3.2) +7 more potentially affected by CVE-2023-50781 via m2crypto (>=0.22.3, <=0.40.1)
m2crypto PYPI version =0.22.3, =0.21.2, =0.23.0, =0.1.3, =1.0.0, =0.8.0.dev0, =1.0.0.dev8, =5.6.0.dev0, =7.0.0.dev12 Source cves: CVE-2023-50781 Source advisory: OSV:PYSEC-2026-1595...
python-M2Crypto-doc-0.48.0-1.1 on GA media (moderate)
python-M2Crypto-doc-0.48.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10990-1 Rating: moderate Cross-References: CVE-2026-0672 CVSS scores: CVE-2026-0672 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2026-0672 SUSE : 8.7...
OPENSUSE-SU-2026:10990-1 python-M2Crypto-doc-0.48.0-1.1 on GA media
These are all security issues fixed in the python-M2Crypto-doc-0.48.0-1.1 package on the GA media of openSUSE Tumbleweed...
Azure Linux 3.0 Security Update: m2crypto / python-pygments (CVE-2019-11358)
The version of m2crypto / python-pygments installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-11358 advisory. - jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles...
Siemens SIMATIC Devices Use of a Broken or Risky Cryptographic Algorithm (CVE-2023-50781)
A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...
EUVD-2020-18321
Malware in sbrugna...
EUVD-2024-0587
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2009-0127
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - M2Crypto does not properly check the return value from the OpenSSL EVPVerifyFinal, DSAverify, ECDSAverify, DSAdoverify, and ECDSAdoverify functions, which might...
SUSE SLES15 : Recommended update for python3-M2Crypto (SUSE-SU-SUSE-RU-2025:0800-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2025:0800-1 advisory. - Fix spelling of BSD-2-Clause license. - Update to 0.44.0: - The real license is BSD 2-Clause, not MIT. - Remove...
SUSE SLED15 / SLES15 / openSUSE 15 : Recommended update for python3-M2Crypto (SUSE-SU-SUSE-RU-2025:0796-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2025:0796-1 advisory. - Fix spelling of BSD-2-Clause license. - Update to 0.44.0: - The real license is BSD 2-Clause, n...
SUSE-RU-2025:0796-1 Recommended update for python3-M2Crypto
This update for python3-M2Crypto fixes the following issues: - Fix spelling of BSD-2-Clause license. - Update to 0.44.0: - The real license is BSD 2-Clause, not MIT. - Remove python-M2Crypto.keyring, because PyPI broke GPG support - Build for modern python stack on SLE/Leap - require setuptools -...
Linux Distros Unpatched Vulnerability : CVE-2020-25657
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed...
