(RHSA-2018:3600) Moderate: python-cryptography security update

2018-11-1321:57:38

access.redhat.com

435

0.002 Low

EPSS

Percentile

55.3%

JSON

The python-cryptography packages contain a Python Cryptographic Authority’s (PyCA’s) cryptography library, which provides cryptographic primitives and recipes to Python developers.

Security Fix(es):

python-cryptography: GCM tag forgery via truncated tag in finalize_with_tag API (CVE-2018-10903)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7ppc64lepython-cryptography-debuginfo< 2.1.4-3.el7ostpython-cryptography-debuginfo-2.1.4-3.el7ost.ppc64le.rpm
RedHat7x86_64python-cryptography-debuginfo< 2.1.4-3.el7ostpython-cryptography-debuginfo-2.1.4-3.el7ost.x86_64.rpm
RedHat7x86_64python2-cryptography< 2.1.4-3.el7ostpython2-cryptography-2.1.4-3.el7ost.x86_64.rpm
RedHat7ppc64lepython2-cryptography< 2.1.4-3.el7ostpython2-cryptography-2.1.4-3.el7ost.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	ppc64le	python-cryptography-debuginfo	< 2.1.4-3.el7ost	python-cryptography-debuginfo-2.1.4-3.el7ost.ppc64le.rpm
RedHat	7	x86_64	python-cryptography-debuginfo	< 2.1.4-3.el7ost	python-cryptography-debuginfo-2.1.4-3.el7ost.x86_64.rpm
RedHat	7	x86_64	python2-cryptography	< 2.1.4-3.el7ost	python2-cryptography-2.1.4-3.el7ost.x86_64.rpm
RedHat	7	ppc64le	python2-cryptography	< 2.1.4-3.el7ost	python2-cryptography-2.1.4-3.el7ost.ppc64le.rpm

0.002 Low

EPSS

Percentile

55.3%

JSON

Related for RHSA-2018:3600