Lucene search
K

600 matches found

AlmaLinux
AlmaLinux
added 2023/11/07 12:0 a.m.55 views

Moderate: python-cryptography security update

The python-cryptography packages contain a Python Cryptographic Authority's PyCA's cryptography library, which provides cryptographic primitives and recipes to Python developers. Security Fixes: python-cryptography: memory corruption via immutable objects CVE-2023-23931 For more details about the...

6.5CVSS7.3AI score0.01301EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.34 views

Rocky Linux 8 : python-cryptography (RLSA-2021:1608)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1608 advisory. - python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS1 v1.5 ciphertext...

9.1CVSS7.7AI score0.06718EPSS
Exploits1References9
Photon
Photon
added 2023/11/04 12:0 a.m.55 views

Critical Photon OS Security Update - PHSA-2023-3.0-0681

Updates of 'python-cryptography', 'grub2', 'coredns' packages of Photon OS have been released...

9.8CVSS6.5AI score0.01605EPSS
Exploits3
Oracle linux
Oracle linux
added 2023/10/25 12:0 a.m.33 views

python39:3.9 and python39-devel:3.9 security update

Cython 0.29.21-5 - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz1877430 modwsgi 4.7.1-5 - Core dumped upon file upload = 1GB Resolves: rhbz2125172 numpy 1.19.4-3 - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz1933055 pybind11 2.7.1-1 - Update...

5CVSS5.7AI score0.03273EPSS
Exploits0
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.11 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2740)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01301EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2771)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01301EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.4 views

The vulnerability of the Python programming language’s cryptography interpreter lies in errors in the certificate validation process, which allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the Python programming language’s cryptography interpreter is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

7.8CVSS6.5AI score0.00613EPSS
Exploits1References9Affected Software3
RedHat Linux
RedHat Linux
added 2023/09/05 11:53 a.m.3 views

python-cryptography: memory corruption via immutable objects

A vulnerability was found in python-cryptography. In affected versions, Cipher.updateinto would accept Python objects which implement the buffer protocol but provide only immutable buffers. This issue allows immutable objects such as bytes to be mutated, thus violating the fundamental rules of...

6.5CVSS6.8AI score0.01301EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2023/09/05 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2706)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01301EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/09/05 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2664)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01301EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/08/31 12:0 a.m.14 views

Rocky Linux 8 : python38:3.8 and python38-devel:3.8 (RLSA-2023:3781)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:3781 advisory. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank...

7.5CVSS7.4AI score0.20459EPSS
Exploits3References3
RedHat Linux
RedHat Linux
added 2023/08/21 9:53 p.m.1 views

python-cryptography: memory corruption via immutable objects

A vulnerability was found in python-cryptography. In affected versions, Cipher.updateinto would accept Python objects which implement the buffer protocol but provide only immutable buffers. This issue allows immutable objects such as bytes to be mutated, thus violating the fundamental rules of...

6.5CVSS6.8AI score0.01301EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2023/08/01 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2518)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01301EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/08/01 12:0 a.m.10 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2531)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01301EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/07/31 12:0 a.m.14 views

EulerOS Virtualization 2.9.1 : python-cryptography (EulerOS-SA-2023-2518)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected...

6.5CVSS6.7AI score0.01301EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/07/31 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2466)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01301EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/07/31 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2491)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01301EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/07/31 12:0 a.m.18 views

EulerOS Virtualization 2.9.0 : python-cryptography (EulerOS-SA-2023-2531)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected...

6.5CVSS6.7AI score0.01301EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/07/28 12:0 a.m.18 views

EulerOS Virtualization 2.10.0 : python-cryptography (EulerOS-SA-2023-2491)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected...

6.5CVSS6.7AI score0.01301EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/07/28 12:0 a.m.21 views

EulerOS Virtualization 2.10.1 : python-cryptography (EulerOS-SA-2023-2466)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected...

6.5CVSS6.7AI score0.01301EPSS
Exploits1References2
Rows per page
Query Builder