UBUNTU-CVE-2024-56327

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2024-56327
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-56327.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2024-56327
Related
Published
2024-12-19T23:15:00Z
Modified
2025-01-13T10:26:51Z
Summary
[none]
Details

pyrage is a set of Python bindings for the rage file encryption library (age in Rust). pyrage uses the Rust age crate for its underlying operations, and age is vulnerable to GHSA-4fg7-vxc8-qx5w. All details of GHSA-4fg7-vxc8-qx5w are relevant to pyrage for the versions specified in this advisory. See GHSA-4fg7-vxc8-qx5w for full details. Versions of pyrage before 1.2.0 lack plugin support and are therefore not affected. An equivalent issue was fixed in the reference Go implementation of age, see advisory GHSA-32gq-x56h-299c. This issue has been addressed in version 1.2.3 and all users are advised to update. There are no known workarounds for this vulnerability.

References

Affected packages

Ubuntu:22.04:LTS / age

Package

Name
age
Purl
pkg:deb/ubuntu/age@1.0.0-1ubuntu0.1?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.0.0~rc1-2
1.0.0-1
1.0.0-1ubuntu0.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / age

Package

Name
age
Purl
pkg:deb/ubuntu/age@1.1.1-1build1?arch=source&distro=oracular

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.1-1build1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / age

Package

Name
age
Purl
pkg:deb/ubuntu/age@1.1.1-1ubuntu0.24.04.2?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.1-1build1
1.1.1-1ubuntu0.24.04.1
1.1.1-1ubuntu0.24.04.2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}