SUSE-SU-2021:0675-1

HIGH7.5

Security update for python-cryptography

Published Mar 2, 2021

Modified 1 months ago

Fix available

Details

Description of the patch:

This update for python-cryptography fixes the following issues:

CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow (bsc#1182066).

Affected Packages

python-cryptography

SUSE Linux Enterprise High Performance Computing 12 SP2SUSE Linux Enterprise High Performance Computing 12 SP3SUSE Linux Enterprise High Performance Computing 12 SP4SUSE Linux Enterprise High Performance Computing 12 SP5SUSE Linux Enterprise Server 12 SP2

Fixed in:

0:2.1.4-7.34.1

python3-cryptography

Fixed in:

0:2.1.4-7.34.1

References

ADVISORY

https://bugzilla.suse.com/1182066

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2021-March/008413.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-36242/