920912 – <dev-python/pycryptodome-3.19.1: side-channel leakage with OAEP decryption

Bug 920912 - <dev-python/pycryptodome-3.19.1: side-channel leakage with OAEP decryption

Summary: <dev-python/pycryptodome-3.19.1: side-channel leakage with OAEP decryption

Status:	CONFIRMED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal
Assignee:	Gentoo Security

URL:
Whiteboard:	B3 [glsa?]
Keywords:

Depends on:	920911
Blocks:
	Show dependency tree

Reported:	2023-12-29 04:23 UTC by Michał Górny
Modified:	2023-12-31 08:28 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Michał Górny archtester

2023-12-29 04:23:40 UTC

+3.19.1 (28 December 2023)
+++++++++++++++++++++++++++
+
+Resolved issues
+---------------
+* Fixed a side-channel leakage with OAEP decryption that could be
+  exploited to carry out a Manger attack. Thanks to Hubert Kario.

Comment 1 Michał Górny archtester

2023-12-31 07:17:33 UTC

cleanup done.