USN-6673-1: python-cryptography vulnerabilities

🗓️ 04 Mar 2024 14:23:13Reported by UbuntuType

ubuntu

ubuntu🔗 ubuntu.com👁 441 Views

Ubuntu python-cryptography vulnerabilities 22.04, 20.04, 18.04 LTS

Reporter	Title	Published	Views	Family All 245
IBM Security Bulletins	Security Bulletin: Vulnerability in Cryptography package affects watsonx.data	3 Sep 202420:53	–	ibm
IBM Security Bulletins	Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the Python Cryptographic Authority package	26 Jun 202406:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	20 Aug 202502:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server Replication Services	27 Feb 202619:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cryptography affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2023-0286, CVE-2023-50782]	20 Jun 202510:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cryptography and Jinja [CVE-2023-50782, CVE-2024-22195]	8 Apr 202412:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar App SDK for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	9 Apr 202418:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses cryptography-41.0.2-cp37-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2023-50782	29 May 202406:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cryptography affects IBM Process Mining CVE-2023-50782	29 Mar 202410:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Truststore Manager uses cryptography-41.0.4-cp37-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2023-50782	29 May 202414:52	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	18.04	any	python-cryptography	2.1.4-1ubuntu1.4+esm1	python-cryptography_2.1.4-1ubuntu1.4+esm1_any.deb
Ubuntu	20.04	amd64	python-cryptography	2.8-3ubuntu0.3	python-cryptography_2.8-3ubuntu0.3_amd64.deb
Ubuntu	20.04	arm64	python-cryptography	2.8-3ubuntu0.3	python-cryptography_2.8-3ubuntu0.3_arm64.deb
Ubuntu	20.04	armhf	python-cryptography	2.8-3ubuntu0.3	python-cryptography_2.8-3ubuntu0.3_armhf.deb
Ubuntu	20.04	ppc64el	python-cryptography	2.8-3ubuntu0.3	python-cryptography_2.8-3ubuntu0.3_ppc64el.deb
Ubuntu	20.04	riscv64	python-cryptography	2.8-3ubuntu0.3	python-cryptography_2.8-3ubuntu0.3_riscv64.deb
Ubuntu	20.04	s390x	python-cryptography	2.8-3ubuntu0.3	python-cryptography_2.8-3ubuntu0.3_s390x.deb
Ubuntu	20.04	amd64	python-cryptography-dbgsym	2.8-3ubuntu0.3	python-cryptography-dbgsym_2.8-3ubuntu0.3_amd64.deb
Ubuntu	20.04	arm64	python-cryptography-dbgsym	2.8-3ubuntu0.3	python-cryptography-dbgsym_2.8-3ubuntu0.3_arm64.deb
Ubuntu	20.04	armhf	python-cryptography-dbgsym	2.8-3ubuntu0.3	python-cryptography-dbgsym_2.8-3ubuntu0.3_armhf.deb

04 Mar 2024 14:23Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.00879

SSVC

ubuntu python-cryptography vulnerabilities rsa pkcs#1 memory operations openssl pkcs#12 denial of service esm 23.10 22.04 20.04 18.04