SUSE-SU-2020:0792-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2020/suse-su-20200792-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2020:0792-1

Upstream

CVE-2018-10903

Related

CVE-2018-10903

Published

2020-03-25T14:14:32Z

Modified

2025-05-02T04:07:29.411027Z

Summary

Security update for python-cffi, python-cryptography

Details

This update for python-cffi, python-cryptography fixes the following issues:

Security issue fixed:

CVE-2018-10903: Fixed GCM tag forgery via truncated tag in finalizewithtag API (bsc#1101820).

Non-security issues fixed:

python-cffi was updated to 1.11.2 (bsc#1138748, jsc#ECO-1256, jsc#PM-1598):

fixed a build failure on i586 (bsc#1111657)
Salt was unable to highstate in snapshot 20171129 (bsc#1070737)
Update pytest in spec to add c directory tests in addition to testing directory.
update to version 1.11.2:
- Fix Windows issue with managing the thread-state on CPython 3.0 to 3.5
Update pytest in spec to add c directory tests in addition to testing directory.
Omit testinitonce_multithread tests as they rely on multiple threads finishing in a given time. Returns sporadic pass/fail within build.
Update to 1.11.1:
- Fix tests, remove deprecated C API usage
- Fix (hack) for 3.6.0/3.6.1/3.6.2 giving incompatible binary extensions (cpython issue #29943)
- Fix for 3.7.0a1+
Update to 1.11.0:
- Support the modern standard types char16t and char32t. These work like wchart: they represent one unicode character, or when used as charNt * or charNt[] they represent a unicode string. The difference with wchart is that they have a known, fixed size. They should work at all places that used to work with wchart (please report an issue if I missed something). Note that with setsource(), you need to make sure that these types are actually defined by the C source you provide (if used in cdef()).
- Support the C99 types float _Complex and double _Complex. Note that libffi doesn't support them, which means that in the ABI mode you still cannot call C functions that take complex numbers directly as arguments or return type.
- Fixed a rare race condition when creating multiple FFI instances from multiple threads. (Note that you aren't meant to create many FFI instances: in inline mode, you should write ffi = cffi.FFI() at module level just after import cffi; and in out-of-line mode you don't instantiate FFI explicitly at all.)
- Windows: using callbacks can be messy because the CFFI internal error messages show up to stderr-but stderr goes nowhere in many applications. This makes it particularly hard to get started with the embedding mode. (Once you get started, you can at least use @ffi.def_extern(onerror=...) and send the error logs where it makes sense for your application, or record them in log files, and so on.) So what is new in CFFI is that now, on Windows CFFI will try to open a non-modal MessageBox (in addition to sending raw messages to stderr). The MessageBox is only visible if the process stays alive: typically, console applications that crash close immediately, but that is also the situation where stderr should be visible anyway.
- Progress on support for callbacks in NetBSD.
- Functions returning booleans would in some case still return 0 or 1 instead of False or True. Fixed.
- ffi.gc() now takes an optional third parameter, which gives an estimate of the size (in bytes) of the object. So far, this is only used by PyPy, to make the next GC occur more quickly (issue #320). In the future, this might have an effect on CPython too (provided the CPython issue 31105 is addressed).
- Add a note to the documentation: the ABI mode gives function objects that are slower to call than the API mode does. For some reason it is often thought to be faster. It is not!
Update to 1.10.1:
- Fixed the line numbers reported in case of cdef() errors. Also, I just noticed, but pycparser always supported the preprocessor directive # 42 'foo.h' to mean 'from the next line, we're in file foo.h starting from line 42';, which it puts in the error messages.
update to 1.10.0:
- Issue #295: use calloc() directly instead of PyObjectMalloc()+memset() to handle ffi.new() with a default allocator. Speeds up ffi.new(large-array) where most of the time you never touch most of the array.
  - Implemented the remaining cases for ffi.frombuffer. Now all buffer/memoryview objects can be passed. The one remaining check is against passing unicode strings in Python 2. (They support the buffer interface, but that gives the raw bytes behind the UTF16/UCS4 storage, which is most of the times not what you expect. In Python 3 this has been fixed and the unicode strings don't support the memoryview interface any more.)
  - The C type Bool or bool now converts to a Python boolean when reading, instead of the content of the byte as an integer. The potential incompatibility here is what occurs if the byte contains a value different from 0 and 1. Previously, it would just return it; with this change, CFFI raises an exception in this case. But this case means 'undefined behavior'; in C; if you really have to interface with a library relying on this, don't use bool in the CFFI side. Also, it is still valid to use a byte string as initializer for a bool[], but now it must only contain \x00 or \x01. As an aside, ffi.string() no longer works on bool[] (but it never made much sense, as this function stops at the first zero).
  - PyPy: ffi.new() and ffi.newallocator()() did not record 'memory pressure';, causing the GC to run too infrequently if you call ffi.new() very often and/or with large arrays. Fixed in PyPy 5.7.
  - Support in ffi.cdef() for numeric expressions with + or -. Assumes that there is no overflow; it should be fixed first before we add more general support for arbitrary arithmetic on constants.
do not generate HTML documentation for packages that are indirect dependencies of Sphinx (see docs at https://cffi.readthedocs.org/ )
update to 1.9.1
- Structs with variable-sized arrays as their last field: now we track the length of the array after ffi.new() is called, just like we always tracked the length of ffi.new('int[]', 42). This lets us detect out-of-range accesses to array items. This also lets us display a better repr(), and have the total size returned by ffi.sizeof() and ffi.buffer(). Previously both functions would return a result based on the size of the declared structure type, with an assumed empty array. (Thanks andrew for starting this refactoring.)
- Add support in cdef()/setsource() for unspecified-length arrays in typedefs: typedef int foot[...];. It was already supported for global variables or structure fields.
- I turned in v1.8 a warning from cffi/model.py into an error: 'enum xxx' has no values explicitly defined: refusing to guess which integer type it is meant to be (unsigned/signed, int/long). Now I'm turning it back to a warning again; it seems that guessing that the enum has size int is a 99%-safe bet. (But not 100%, so it stays as a warning.)
- Fix leaks in the code handling FILE * arguments. In CPython 3 there is a remaining issue that is hard to fix: if you pass a Python file object to a FILE * argument, then os.dup() is used and the new file descriptor is only closed when the GC reclaims the Python file object-and not at the earlier time when you call close(), which only closes the original file descriptor. If this is an issue, you should avoid this automatic convertion of Python file objects: instead, explicitly manipulate file descriptors and call fdopen() from C (...via cffi).
- When passing a void * argument to a function with a different pointer type, or vice-versa, the cast occurs automatically, like in C. The same occurs for initialization with ffi.new() and a few other places. However, I thought that char * had the same property-but I was mistaken. In C you get the usual warning if you try to give a char * to a char ** argument, for example. Sorry about the confusion. This has been fixed in CFFI by giving for now a warning, too. It will turn into an error in a future version.
- Issue #283: fixed ffi.new() on structures/unions with nested anonymous structures/unions, when there is at least one union in the mix. When initialized with a list or a dict, it should now behave more closely like the { } syntax does in GCC.
- CPython 3.x: experimental: the generated C extension modules now use the 'limited API';, which means that, as a compiled .so/.dll, it should work directly on any version of CPython >= 3.2. The name produced by distutils is still version-specific. To get the version-independent name, you can rename it manually to NAME.abi3.so, or use the very recent setuptools 26.
- Added ffi.compile(debug=...), similar to python setup.py build --debug but defaulting to True if we are running a debugging version of Python itself.
- Removed the restriction that ffi.from_buffer() cannot be used on byte strings. Now you can get a char * out of a byte string, which is valid as long as the string object is kept alive. (But don't use it to modify the string object! If you need this, use bytearray or other official techniques.)
- PyPy 5.4 can now pass a byte string directly to a char * argument (in older versions, a copy would be made). This used to be a CPython-only optimization.
- ffi.gc(p, None) removes the destructor on an object previously created by another call to ffi.gc()
- bool(ffi.cast('primitive type', x)) now returns False if the value is zero (including -0.0), and True otherwise. Previously this would only return False for cdata objects of a pointer type when the pointer is NULL.
- bytearrays: ffi.frombuffer(bytearray-object) is now supported. (The reason it was not supported was that it was hard to do in PyPy, but it works since PyPy 5.3.) To call a C function with a char * argument from a buffer object-now including bytearrays-you write lib.foo(ffi.frombuffer(x)). Additionally, this is now supported: p[0:length] = bytearray-object. The problem with this was that a iterating over bytearrays gives numbers instead of characters. (Now it is implemented with just a memcpy, of course, not actually iterating over the characters.)
- C++: compiling the generated C code with C++ was supposed to work, but failed if you make use the bool type (because that is rendered as the C _Bool type, which doesn't exist in C++).
- help(lib) and help(lib.myfunc) now give useful information, as well as dir(p) where p is a struct or pointer-to-struct.
update for multipython build
disable 'negative left shift' warning in test suite to prevent failures with gcc6, until upstream fixes the undefined code in question (bsc#981848)
Update to version 1.6.0:
- ffi.list_types()
- ffi.unpack()
- extern 'Python+C';
- in API mode, lib.foo.doc contains the C signature now.
- Yet another attempt at robustness of ffi.def_extern() against CPython's interpreter shutdown logic.
Update in SLE-12 (bsc#1138748, jsc#ECO-1256, jsc#PM-1598)
Make this version of the package compatible with OpenSSL 1.1.1d, thus fixing bsc#1149792.
bsc#1101820 CVE-2018-10903 GCM tag forgery via truncated tag in finalizewithtag API
Add proper conditional for the python2, the ifpython works only for the requires/etc
add missing dependency on python ssl
update to version 2.1.4:
- Added X509upref for an upcoming pyOpenSSL release.
update to version 2.1.3:
- Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.0g.
update to version 2.1.2:
- Corrected a bug with the manylinux1 wheels where OpenSSL's stack was marked executable.
fix BuildRequires conditions for python3
update to 2.1.1
Fix cffi version requirement.
Disable memleak tests to fix build with OpenSSL 1.1 (bsc#1055478)
update to 2.0.3
update to 2.0.2
update to 2.0
update to 1.9
add python-packaging to requirements explicitly instead of relying on setuptools to pull it in
Switch to singlespec approach
update to 1.8.1
Adust Requires and BuildRequires

References

Affected packages

SUSE:Enterprise Storage 5

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Enterprise%20Storage%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Enterprise%20Storage%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Enterprise%20Storage%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:HPE Helion OpenStack 8

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=HPE%20Helion%20OpenStack%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=HPE%20Helion%20OpenStack%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=HPE%20Helion%20OpenStack%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:Linux Enterprise Server 12 SP2-BCL

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:Linux Enterprise Server 12 SP2-LTSS

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:Linux Enterprise Server 12 SP3-BCL

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:Linux Enterprise Server 12 SP3-LTSS

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:Linux Enterprise Server 12 SP4

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:Linux Enterprise Server 12 SP5

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:Linux Enterprise Server for SAP Applications 12 SP2

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:Linux Enterprise Server for SAP Applications 12 SP3

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:Linux Enterprise Server for SAP Applications 12 SP4

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:Linux Enterprise Server for SAP Applications 12 SP5

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:OpenStack Cloud 7

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:OpenStack Cloud 8

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20OpenStack%20Cloud%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20OpenStack%20Cloud%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20OpenStack%20Cloud%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

SUSE:OpenStack Cloud Crowbar 8

python-cffi

Package

Name: python-cffi
Purl: pkg:rpm/suse/python-cffi&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.2-5.11.1

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-cryptography

Package

Name: python-cryptography
Purl: pkg:rpm/suse/python-cryptography&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.4-7.28.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"

python-xattr

Package

Name: python-xattr
Purl: pkg:rpm/suse/python-xattr&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.5-6.3.2

Ecosystem specific

{
    "binaries": [
        {
            "python-cryptography": "2.1.4-7.28.2",
            "python-cffi": "1.11.2-5.11.1",
            "python3-cffi": "1.11.2-5.11.1",
            "python3-cryptography": "2.1.4-7.28.2",
            "python-xattr": "0.7.5-6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0792-1.json"