OESA-2023-1088

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1088
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2023-1088.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2023-1088
Upstream
Published
2023-02-17T11:04:54Z
Modified
2025-08-12T05:18:27.641640Z
Summary
python-cryptography security update
Details

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

Security Fix(es):

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.update_into would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as bytes) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since update_into was originally introduced in cryptography 1.8.(CVE-2023-23931)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:22.03-LTS / python-cryptography

Package

Name
python-cryptography
Purl
pkg:rpm/openEuler/python-cryptography&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.3.1-5.oe2203

Ecosystem specific 

{
    "src": [
        "python-cryptography-3.3.1-5.oe2203.src.rpm"
    ],
    "x86_64": [
        "python-cryptography-debuginfo-3.3.1-5.oe2203.x86_64.rpm",
        "python-cryptography-debugsource-3.3.1-5.oe2203.x86_64.rpm",
        "python3-cryptography-3.3.1-5.oe2203.x86_64.rpm"
    ],
    "aarch64": [
        "python3-cryptography-3.3.1-5.oe2203.aarch64.rpm",
        "python-cryptography-debuginfo-3.3.1-5.oe2203.aarch64.rpm",
        "python-cryptography-debugsource-3.3.1-5.oe2203.aarch64.rpm"
    ],
    "noarch": [
        "python-cryptography-help-3.3.1-5.oe2203.noarch.rpm"
    ]
}