Stay Secure with the Latest Linux Advisories

security advisorysecurity impactmemory allocation

Mageia: 2020-0364 Critical Security Update For Python-RSA

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation). (CVE-2020-13757) . MGASA-2020-0364 - Updated python-rsa packages fix security vulnerability Publication date: 06 Sep 2020 URL: https://advisories.mageia.org/MGASA-2020-0364.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-13757 Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation). (CVE-2020-13757) References: - https://bugs.mageia.org/show_bug.cgi?id=26954 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/ZYB65VNILRBTXL6EITQTH2PZPK7I23MW/ - https://www.cve.org/CVERecord?id=CVE-2020-13757 SRPMS: - 7/core/python-rsa-4.0-1.1.mga7 . Recent updates to Python-RSA packages on Mageia address critical security vulnerabilities, specifically targeting the implications of CVE-2020-13757.. Python-RSA, Security Advisory, Mageia Update, Memory Management. . Severity: Critical. LinuxSecurity.com Team

Sep 06, 2020 •Critical Mageia