Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | python3-cryptography: Upgrade to 3.3.2 | Mingli Yu | 2021-04-23 | 1 | -0/+65 |
Fix a security issue CVE-2020-36242 where certain sequences of ``update()`` calls when symmetrically encrypting very large payloads (>2GB) could result in an integer overflow, leading to buffer overflows. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> |