MGASA-2015-0460
- Source
- https://advisories.mageia.org/MGASA-2015-0460.html
- Import Source
- https://advisories.mageia.org/MGASA-2015-0460.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2015-0460
- Published
- 2015-11-27T23:11:20Z
- Modified
- 2026-04-16T04:28:35Z
- Summary
- Updated python-cryptography packages fix security vulnerability
- Details
-
The OpenSSL backend prior to 1.0.2 made extensive use of assertions to check response codes where our tests could not trigger a failure. However, when Python is run with -O these asserts are optimized away. If a user ran Python with this flag and got an invalid response code this could result in undefined behavior or worse (rhbz#1267548).
The python-cryptography and python-cryptography-vectors packages have been updated to version 1.0.2 and python-pyasn1 has been updated to version 0.1.8, fixing this issue.
- References
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:5
python-cryptography
Package
- Name
- python-cryptography
- Purl
- pkg:rpm/mageia/python-cryptography?arch=source&distro=mageia-5
python-cryptography-vectors
Package
- Name
- python-cryptography-vectors
- Purl
- pkg:rpm/mageia/python-cryptography-vectors?arch=source&distro=mageia-5
python-pyasn1
Package
- Name
- python-pyasn1
- Purl
- pkg:rpm/mageia/python-pyasn1?arch=source&distro=mageia-5
python-idna
Package
- Name
- python-idna
- Purl
- pkg:rpm/mageia/python-idna?arch=source&distro=mageia-5
python-ipaddress
Package
- Name
- python-ipaddress
- Purl
- pkg:rpm/mageia/python-ipaddress?arch=source&distro=mageia-5
python-cffi
Package
- Name
- python-cffi
- Purl
- pkg:rpm/mageia/python-cffi?arch=source&distro=mageia-5