Bugzilla – Bug 1178676
VUL-0: CVE-2020-25658: python-rsa: bleichenbacher timing oracle attack against RSA decryption
Last modified: 2024-05-28 12:00:08 UTC
rh#1889972 Python-rsa is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext. References: https://bugzilla.redhat.com/show_bug.cgi?id=1889972 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-25658 https://access.redhat.com/security/cve/CVE-2020-25658
Fell victim to e-mail overload submitted
SUSE-SU-2022:3932-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1178676 CVE References: CVE-2020-25658 JIRA References: Sources used: openSUSE Leap Micro 5.2 (src): python-rsa-3.4.2-150000.3.7.1 openSUSE Leap 15.4 (src): python-rsa-3.4.2-150000.3.7.1 openSUSE Leap 15.3 (src): python-rsa-3.4.2-150000.3.7.1 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (src): python-rsa-3.4.2-150000.3.7.1 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (src): python-rsa-3.4.2-150000.3.7.1 SUSE Linux Enterprise Module for Basesystem 15-SP4 (src): python-rsa-3.4.2-150000.3.7.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): python-rsa-3.4.2-150000.3.7.1 SUSE Linux Enterprise Micro 5.3 (src): python-rsa-3.4.2-150000.3.7.1 SUSE Linux Enterprise Micro 5.2 (src): python-rsa-3.4.2-150000.3.7.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:0648-1: An update that solves one vulnerability can now be installed. Category: security (moderate) Bug References: 1178676 CVE References: CVE-2020-25658 Sources used: Public Cloud Module 12 (src): python-rsa-3.1.4-12.19.2 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
This is an autogenerated message for OBS integration: This bug (1178676) was mentioned in https://build.opensuse.org/request/show/1116020 Factory / python-rsa
Done, closing.