Bug 23822 - python-OpenSSL new security issues CVE-2018-100080[78]
Summary: python-OpenSSL new security issues CVE-2018-100080[78]
Status: RESOLVED OLD
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: Python Stack Maintainers
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-11-08 18:25 CET by David Walser
Modified: 2019-11-06 13:45 CET (History)
3 users (show)

See Also:
Source RPM: python-OpenSSL-16.1.0-1.mga6.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2018-11-08 18:25:57 CET 
Ubuntu has issued an advisory today (November 8):
https://usn.ubuntu.com/3813-1/

The issues are fixed upstream in 17.5.0 (already in Cauldron).
Comment 1 Marja Van Waes 2018-11-08 23:00:43 CET 
Assigning to the Python maintainers, CC'ing the registered maintainer.

CC: (none) => makowski.mageia, marja11
Assignee: bugsquad => python

Comment 2 David Walser 2019-01-17 15:47:15 CET 
RedHat has issued an advisory for this on January 16:
https://access.redhat.com/errata/RHSA-2019:0085
Comment 3 David Walser 2019-05-03 18:32:13 CEST 
openSUSE has issued an advisory for this on April 2:
https://lists.opensuse.org/opensuse-updates/2019-04/msg00032.html

python-cryptography may need a patch to support the fix.
Comment 4 Mike Rambo 2019-11-06 13:45:45 CET 
Mageia 6 is EOL.

CC: (none) => mrambo
Resolution: (none) => OLD
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.