Alerts This Week
Warning Icon 1 562
Alerts This Week
Warning Icon 1 562

Mageia: 2020-0364 Critical Security Update For Python-RSA

mageia
Calendar Grey September 6, 2020
Dist Mageia Esm H88
Recent updates to Python-RSA packages on Mageia address critical security vulnerabilities, specifically targeting the implications of CVE-2020-13757.
Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext

Summary

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation). (CVE-2020-13757)

References

- https://bugs.mageia.org/show_bug.cgi?id=26954

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ZYB65VNILRBTXL6EITQTH2PZPK7I23MW/

- https://www.cve.org/CVERecord?id=CVE-2020-13757

Topics%20covered

Topics Covered

security advisory security impact memory allocation ciphertext python-rsa Mageia

Resolution

SRPMS

- 7/core/python-rsa-4.0-1.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 06 Sep 2020
URL: https://advisories.mageia.org/MGASA-2020-0364.html
Type: security
CVE: CVE-2020-13757

Topics%20covered

Topics Covered

security advisory security impact memory allocation ciphertext python-rsa Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here