Lucene search
K

12 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в python-cryptography

Cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions, Cipher.updateinto would accept Python objects that implement the buffer protocol, but only provide immutable buffers. This would allow immutable objects such as bytes to b...

6.5CVSS6.7AI score0.00688EPSS
Exploits1References2
Oracle linux
Oracle linux
added 2024/01/18 12:0 a.m.365 views

python-cryptography security update

36.0.1-4.0.1 - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates Orabug: 36119159 36.0.1-4 - Fix FTBFS caused by rsapkcs1implicitrejection OpenSSL feature, resolves rhbz2203840 36.0.1-3 - Fix CVE-2023-23931: Don't allow updateinto to mutate immutable objects, resolves rhbz21723...

7.5CVSS8AI score0.01255EPSS
Exploits2
Oracle linux
Oracle linux
added 2023/11/11 12:0 a.m.26 views

python-cryptography security update

36.0.1-4 - Fix FTBFS caused by rsapkcs1implicitrejection OpenSSL feature, resolves rhbz2203840 36.0.1-3 - Fix CVE-2023-23931: Don't allow updateinto to mutate immutable objects, resolves rhbz2172399 - Fix FTBFS due to failing testloadinvalideckeyfrompem and testdecryptinvaliddecrypt...

6.5CVSS6.5AI score0.00688EPSS
Exploits1
OSV
OSV
added 2023/02/21 11:4 a.m.1 views

OESA-2023-1113 python-cryptography security update

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which...

6.5CVSS9AI score0.00688EPSS
Exploits1References2
OSV
OSV
added 2023/02/17 11:4 a.m.1 views

OESA-2023-1088 python-cryptography security update

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which...

6.5CVSS9AI score0.00688EPSS
Exploits1References2
OSV
OSV
added 2023/02/17 11:4 a.m.1 views

OESA-2023-1085 python-cryptography security update

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which...

6.5CVSS9AI score0.00688EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:21 a.m.1 views

SUSE CVE-2023-23931

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

4CVSS7.4AI score0.00688EPSS
Exploits1References25
OSV
OSV
added 2023/02/07 9:15 p.m.1 views

DEBIAN-CVE-2023-23931

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

6.5CVSS6.5AI score0.00688EPSS
Exploits1References1
OSV
OSV
added 2023/02/07 9:15 p.m.1 views

ALPINE-CVE-2023-23931

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

6.5CVSS7AI score0.00688EPSS
Exploits1References1
OSV
OSV
added 2023/02/07 9:15 p.m.1 views

PYSEC-2023-11

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

6.5CVSS6.8AI score0.00688EPSS
Exploits1References3
OSV
OSV
added 2023/02/07 8:54 p.m.34 views

CVE-2023-23931 Cipher.update_into can corrupt memory in pyca cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

4.8CVSS6.7AI score0.00688EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2023/02/07 8:54 p.m.44 views

CVE-2023-23931

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

6.5CVSS7.3AI score0.00688EPSS
Exploits1
Rows per page
Query Builder