Safety CI > DLR-SC/prov2bigchaindb

pyup-pin-networkx-2.3

6 years, 1 month ago

4a3289f4

Pin networkx to latest version 2.3

bigchaindb-driver 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-prov-1.5.3

6 years, 6 months ago

66eb2b31

Pin prov to latest version 1.5.3

bigchaindb-driver 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-bigchaindb-driver-0.6.2

6 years, 7 months ago

ca29f103

Pin bigchaindb-driver to latest version 0.6.2

No dependencies with known security vulnerabilities.

pyup-pin-bigchaindb-driver-0.6.1

6 years, 7 months ago

c9fd49b9

Pin bigchaindb-driver to latest version 0.6.1

No dependencies with known security vulnerabilities.

pyup-pin-bigchaindb-driver-0.6.0

6 years, 7 months ago

f08e0213

Pin bigchaindb-driver to latest version 0.6.0

No dependencies with known security vulnerabilities.

pyup-pin-networkx-2.2

6 years, 8 months ago

2308e6fc

Pin networkx to latest version 2.2

bigchaindb-driver 0.4.1 has known security vulnerabilities.

Package	Installed	Affected	Info
bigchaindb-driver	0.4.1	<0.5.2	show Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

Package

Installed

Affected

Info

bigchaindb-driver

0.4.1

<0.5.2

show

Bigchaindb-driver 0.5.2 includes a fix for CVE-2018-10903: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.

pyup-pin-bigchaindb-driver-0.5.3

6 years, 8 months ago

960a225d

Pin bigchaindb-driver to latest version 0.5.3

No dependencies with known security vulnerabilities.

pyup-pin-bigchaindb-driver-0.5.2

6 years, 9 months ago

ee4fab5e

Update .travis.yml

No dependencies with known security vulnerabilities.

pyup-pin-bigchaindb-driver-0.5.2

6 years, 9 months ago

b1d92ae3

Updated setup.py

No dependencies with known security vulnerabilities.

pyup-pin-bigchaindb-driver-0.5.2

6 years, 9 months ago

21b64c3e

Pin bigchaindb-driver to latest version 0.5.2

No dependencies with known security vulnerabilities.

pyup-pin-bigchaindb-driver-0.5.1

6 years, 9 months ago

4f468903

Pin bigchaindb-driver to latest version 0.5.1

No dependencies with known security vulnerabilities.

pyup-pin-bigchaindb-driver-0.5.0

6 years, 11 months ago

a990105b

Pin bigchaindb-driver to latest version 0.5.0

No dependencies with known security vulnerabilities.

master

7 years, 2 months ago

53f5f5dd

Merge pull request #20 from DLR-SC/develop * Updated packages * Release 0.4.1

No dependencies with known security vulnerabilities.

develop

7 years, 2 months ago

a21c78a8

Fixed typo

No dependencies with known security vulnerabilities.

develop

7 years, 2 months ago

68eb493b

Prepared documentation for release 0.4.1

No dependencies with known security vulnerabilities.