Safety CI > MobSF/Mobile-Security-Framework-MobSF

pyup-scheduled-update-2020-06-20

5 years, 12 months ago

17a34ae6

Update requests from 2.23.0 to 2.24.0

No dependencies with known security vulnerabilities.

master

5 years, 12 months ago

5f11572e

Create SECURITY.md

No dependencies with known security vulnerabilities.

master

6 years ago

e9d436aa

update rsa and frida (#1437)

No dependencies with known security vulnerabilities.

rsa-frida-update

6 years ago

eefee5d2

update rsa and frida

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-06-14

6 years ago

3779d0c5

Update rsa from 4.1 to 4.6

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-06-14

6 years ago

38f5d40c

Update frida from 12.9.7 to 12.9.8

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-06-13

6 years ago

ab5ea900

Update rsa from 4.1 to 4.6

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-06-13

6 years ago

b3575270

Update frida from 12.9.7 to 12.9.8

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-06-12

6 years ago

70e2fd15

Update rsa from 4.1 to 4.2

No dependencies with known security vulnerabilities.

master

6 years ago

a10d8332

Update Frida to 12.9.7, Rsa to 4.1, wkhtml to focal (#1421) * Update frida from 12.9.4 to 12.9.7

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-06-06

6 years ago

da5fbf88

Merge branch 'master' into pyup-scheduled-update-2020-06-06

No dependencies with known security vulnerabilities.

local-run

6 years ago

1d100c54

Merge branch 'master' into local-run

rsa 4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
rsa	4.0	>=3.0,<4.7	show Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
rsa	4.0	<4.3	show Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

Package

Installed

Affected

Info

rsa

4.0

>=3.0,<4.7

show

Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

rsa

4.0

<4.3

show

Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

master

6 years ago

66761445

Add Bouncy Castle and Jackson libraries to whitelisted list (#1426) * Add Bouncy Castle library to

rsa 4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
rsa	4.0	>=3.0,<4.7	show Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
rsa	4.0	<4.3	show Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

Package

Installed

Affected

Info

rsa

4.0

>=3.0,<4.7

show

Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

rsa

4.0

<4.3

show

Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

pyup-scheduled-update-2020-06-11

6 years ago

4c70ca76

Update frida from 12.9.4 to 12.9.7

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2020-06-11

6 years ago

cf786651

Update rsa from 4.0 to 4.1

No dependencies with known security vulnerabilities.