Description
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 11 | | | 3.2.1-1 |
 pypi | | | 3.2 |
 alpine v3.13 | | =0.6.1-r0 || =0.8.2-r0 || =1.0.2-r0 || =1.3.1-r0 || =1.3.2-r0 || =1.4-r0 || =1.4-r1 || =1.4-r2 || =1.5.2-r0 || =1.5.2-r1 || =1.5.3-r0 || =1.7.2-r0 || =1.7.2-r1 || =1.8.1-r0 || =1.8.1-r1 || =1.9-r0 || =2.0.2-r0 || =2.0.3-r0 || =2.0.3-r1 || =2.1.3-r0 || =2.1.4-r0 || =2.1.4-r1 || =2.2.2-r0 || =2.3.1-r0 || =2.3.1-r1 || =2.4.2-r0 || =2.4.2-r1 || =2.4.2-r2 || =2.5-r0 || =2.6.1-r0 || =2.6.1-r1 || =2.7-r0 || =2.7-r1 || =2.8-r0 || =2.8-r1 || =2.9-r0 || =2.9.2-r0 || >=0 <3.2.1-r0 | 3.2.1-r0 |
alpine v3.14 | | =0.6.1-r0 || =0.8.2-r0 || =1.0.2-r0 || =1.3.1-r0 || =1.3.2-r0 || =1.4-r0 || =1.4-r1 || =1.4-r2 || =1.5.2-r0 || =1.5.2-r1 || =1.5.3-r0 || =1.7.2-r0 || =1.7.2-r1 || =1.8.1-r0 || =1.8.1-r1 || =1.9-r0 || =2.0.2-r0 || =2.0.3-r0 || =2.0.3-r1 || =2.1.3-r0 || =2.1.4-r0 || =2.1.4-r1 || =2.2.2-r0 || =2.3.1-r0 || =2.3.1-r1 || =2.4.2-r0 || =2.4.2-r1 || =2.4.2-r2 || =2.5-r0 || =2.6.1-r0 || =2.6.1-r1 || =2.7-r0 || =2.7-r1 || =2.8-r0 || =2.8-r1 || =2.9-r0 || =2.9.2-r0 || >=0 <3.2.1-r0 | 3.2.1-r0 |
debian 12 | | | 3.2.1-1 |
debian 13 | | | 3.2.1-1 |
debian 14 | | | 3.2.1-1 |
alpine v3.23 | | =0.6.1-r0 || =0.8.2-r0 || =1.0.2-r0 || =1.3.1-r0 || =1.3.2-r0 || =1.4-r0 || =1.4-r1 || =1.4-r2 || =1.5.2-r0 || =1.5.2-r1 || =1.5.3-r0 || =1.7.2-r0 || =1.7.2-r1 || =1.8.1-r0 || =1.8.1-r1 || =1.9-r0 || =2.0.2-r0 || =2.0.3-r0 || =2.0.3-r1 || =2.1.3-r0 || =2.1.4-r0 || =2.1.4-r1 || =2.2.2-r0 || =2.3.1-r0 || =2.3.1-r1 || =2.4.2-r0 || =2.4.2-r1 || =2.4.2-r2 || =2.5-r0 || =2.6.1-r0 || =2.6.1-r1 || =2.7-r0 || =2.7-r1 || =2.8-r0 || =2.8-r1 || =2.9-r0 || =2.9.2-r0 || >=0 <3.2.1-r0 | 3.2.1-r0 |
 rpm rhel8 | | | 0:3.2.1-4.el8 |
rpm rhel7 | | - | - |
