Lucene search
GoogleOSV:SUSE-SU-2024:2064-1HistoryJun 18, 2024 - 11:14 a.m.
Security update for python-Authlib
2024-06-1811:14:32
Google
osv.dev
python
authlib
security update
algorithm confusion
asymmetric public keys
cve-2024-37568
software
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.3
Confidence
Low
This update for python-Authlib fixes the following issues:
- Update to version 1.3.1
- CVE-2024-37568: Fixed algorithm confusion with asymmetric public keys. (bsc#1226138)
Related
fedora
fedora
[SECURITY] Fedora 39 Update: python-authlib-1.3.1-1.fc39
2024-06-20 08:01:56
[SECURITY] Fedora 40 Update: python-authlib-1.3.1-1.fc40
2024-06-18 10:07:35
ibm
ibm
Security Bulletin: authlib-cve202437568-sec-bypass
2024-08-02 07:51:16
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-2e9c58d661)
2024-06-21 00:00:00
openSUSE: Security Advisory for python (SUSE-SU-2024:2064-1)
2024-06-19 00:00:00
Fedora: Security Advisory (FEDORA-2024-7cc9a030d9)
2024-06-19 00:00:00
nessus
nessus
Fedora 40 : python-authlib (2024-7cc9a030d9)
2024-06-18 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-Authlib (SUSE-SU-2024:2064-1)
2024-06-19 00:00:00
Fedora 39 : python-authlib (2024-2e9c58d661)
2024-06-20 00:00:00
veracode
veracode
Authentication Bypass
2024-06-12 05:44:58
osv
osv
python310-Authlib-1.3.1-1.1 on GA media
2024-06-15 00:00:00
Authlib has algorithm confusion with asymmetric public keys
2024-06-09 21:30:33
CVE-2024-37568
2024-06-09 19:15:52
github
github
Authlib has algorithm confusion with asymmetric public keys
2024-06-09 21:30:33
debiancve
debiancve
CVE-2024-37568
2024-06-09 19:15:52
mageia
mageia
Updated python-authlib packages fix security vulnerability
2024-06-25 19:12:04
nvd
nvd
CVE-2024-37568
2024-06-09 19:15:52
vulnrichment
vulnrichment
CVE-2024-37568
2024-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2024-37568
2024-06-09 00:00:00
cvelist
cvelist
CVE-2024-37568
2024-06-09 00:00:00
cve
cve
CVE-2024-37568
2024-06-09 19:15:52
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.3
Confidence
Low
Related for OSV:SUSE-SU-2024:2064-1