Safety CI > jonaylor89/chronos

master

5 years, 3 months ago

716c02f8

Merge pull request #30 from jonaylor89/pyup-update-googleapis-common-protos-1.51.0-to-1.52.0 Update

rsa 4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
rsa	4.0	>=2.1,<4.7	show Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
rsa	4.0	<4.3	show Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

Package

Installed

Affected

Info

rsa

4.0

>=2.1,<4.7

show

Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

rsa

4.0

<4.3

show

Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

pyup-update-googleapis-common-protos-1.51.0-to-1.52.0

5 years, 3 months ago

a573f2ed

Update googleapis-common-protos from 1.51.0 to 1.52.0

rsa 4.0 has known security vulnerabilities.

Package	Installed	Affected	Info
rsa	4.0	>=2.1,<4.7	show Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
rsa	4.0	<4.3	show Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

Package

Installed

Affected

Info

rsa

4.0

>=2.1,<4.7

show

Rsa 4.7 includes a fix for CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

rsa

4.0

<4.3

show

Rsa 4.3 includes a fix for CVE-2020-13757: Python-RSA before 4.3 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

master

5 years, 3 months ago

2033a803

Merge pull request #29 from jonaylor89/pyup-update-google-api-python-client-1.9.0-to-1.9.1 Update g