Explore top 10 tips to secure your open-source projects now. Read More
×
python-cryptography could be made to expose sensitive information
if it received a specially crafted input.
Software Description:
- python-cryptography: Cryptography Python library
Details:
It was discovered that python-cryptography incorrectly handled certain
inputs. An attacker could possibly use this to get access to sensitive
information.
The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: python-cryptography 2.1.4-1ubuntu1.2 python3-cryptography 2.1.4-1ubuntu1.2 In general, a standard system update will make all the necessary changes.
https://ubuntu.com/security/notices/USN-3720-1
CVE-2018-10903
Get the latest Linux and open source security news straight to your inbox.