SLES 12 — python-cryptography — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 13 February 2020 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:197-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36242 CVE-2020-25659 Upstream summary: In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in […]