Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 920912

Summary: <dev-python/pycryptodome-3.19.1: side-channel leakage with OAEP decryption
Product: Gentoo Security Reporter: Michał Górny <mgorny>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: CONFIRMED ---    
Severity: normal CC: python
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: B3 [glsa?]
Package list:
Runtime testing required: ---
Bug Depends on: 920911    
Bug Blocks:    

Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-12-29 04:23:40 UTC
+3.19.1 (28 December 2023)
+++++++++++++++++++++++++++
+
+Resolved issues
+---------------
+* Fixed a side-channel leakage with OAEP decryption that could be
+  exploited to carry out a Manger attack. Thanks to Hubert Kario.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-12-31 07:17:33 UTC
cleanup done.