Ubuntu - Python-RSA vulnerability (2020-08-31)

情报来源:TSRC

发布时间:2020-08-31

基本信息
  • 发布日期2020-08-31
  • 感知时间2020-08-31
  • 漏洞类型安全更新
  • 风险等级未知
  • 更新版本未知
  • 情报贡献TSRC
更新标题

USN-4478-1: Python-RSA vulnerability

更新详情

python-rsa vulnerability<br/>A security issue affects these releases of Ubuntu and its derivatives:<br/>Ubuntu 14.04 ESM<br/>Summary<br/>Python-RSA could be made to expose sensitive information over the network.<br/>Software Description<br/>python-rsa - Pure-Python RSA implementation (Python 2)<br/>Details<br/>It was discovered that Python-RSA incorrectly handled certain ciphertexts. An attacker could possibly use this issue to obtain sensitive information.<br/>Update instructions<br/>The problem can be corrected by updating your system to the following package versions:<br/>Ubuntu 14.04 ESM<br/>python-rsa - 3.1.2-1ubuntu0.1+esm1<br/>python3-rsa - 3.1.2-1ubuntu0.1+esm1<br/>To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.<br/>In general, a standard system update will make all the necessary changes.<br/>References<br/>CVE-2020-13757<br/>]]&gt;

软件描述

Ubuntu是一个以桌面应用为主的Linux操作系统

CVE编号

<p><a target="_blank" href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13757">CVE-2020-13757</a></p>

Knowsafe分析

暂无

业界资讯

暂无

来源链接

https://usn.ubuntu.com/4478-1/