Integer overflow in cryptography - CVE-2020-36242

Vulnerability identifier: #VU50990

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-36242

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow when processing certain sequences of update calls to symmetrically encrypt multi-GB values. A remote attacker can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

cryptography
ObjectScale
Dell Policy Manager for Secure Connect Gateway (SCG)
QRadar Deployment Intelligence App
PowerStore T
Dell EMC PowerStore Family Operating System
Arch Linux
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE CaaS Platform
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
SUSE OpenStack Cloud
HPE Helion Openstack
Red Hat Enterprise Linux for x86_64
SUSE OpenStack Cloud Crowbar
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
Public Cloud Module
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
Server Applications Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Fedora
scap-security-guide (Red Hat package)
cockpit-ovirt (Red Hat package)
imgbased (Red Hat package)
redhat-release-virtualization-host (Red Hat package)
python3-aliyun-python-sdk-hivisengine
python3-aliyun-python-sdk-hiknoengine
python3-aliyun-python-sdk-hbr
python3-aliyun-python-sdk-oms
python3-aliyun-python-sdk-ossadmin
python3-aliyun-python-sdk-risk
python3-aliyun-python-sdk-eas
python3-aliyun-python-sdk-ocs
python3-aliyun-python-sdk-bss
python3-aliyun-python-sdk-codeup
python3-aliyun-python-sdk-nlp-automl
python3-opencensus-ext-threading
python3-opencensus-context
python2-grpcio-gcp
python3-aiocontextvars
python3-grpcio-gcp
python3-aliyun-python-sdk-xtrace
python3-Automat
python3-aliyun-python-sdk-ledgerdb
python3-pytest-asyncio
python3-opencensus
python3-knack
python3-aliyun-python-sdk-opensearch
python3-aliyun-python-sdk-tdsr
python3-aliyun-python-sdk-sgw
python3-aliyun-python-sdk-gdb
python3-aliyun-python-sdk-metering
python3-aliyun-python-sdk-mpaas
python3-aliyun-python-sdk-paistudio
python3-aliyun-python-sdk-yundun-ds
python3-aliyun-python-sdk-webplus
python3-aliyun-python-sdk
python3-aliyun-python-sdk-resourcemanager
python3-aliyun-python-sdk-acms-open
python3-aliyun-python-sdk-address-purification
python3-aliyun-python-sdk-netana
python3-aliyun-python-sdk-linkedmall
python3-aliyun-python-sdk-iqa
python3-aliyun-python-sdk-cloudgame
python3-aliyun-python-sdk-smarthosting
python3-aliyun-python-sdk-safconsole
python3-aliyun-python-sdk-hitsdb
python3-aliyun-python-sdk-ddoscoo
python3-aliyun-python-sdk-openanalytics
python3-aliyun-python-sdk-sddp
python3-aliyun-python-sdk-tag
python3-aliyun-python-sdk-productcatalog
python3-aliyun-python-sdk-visionai-poc
python3-aliyun-python-sdk-uis
python3-aliyun-python-sdk-teslastream
python3-aliyun-python-sdk-visionai
python3-aliyun-python-sdk-lubancloud
python3-aliyun-python-sdk-nls-cloud-meta
python3-aliyun-python-sdk-acm
python3-aliyun-python-sdk-afs
python3-aliyun-python-sdk-hsm
python3-aliyun-python-sdk-brinekingdom
python3-aliyun-python-sdk-jarvis-public
python3-aliyun-python-sdk-ccs
python3-aliyun-python-sdk-baas
python3-aliyun-python-sdk-privatelink
python3-aliyun-python-sdk-smc
python3-aliyun-python-sdk-videorecog
python3-aliyun-python-sdk-tesladam
python3-aliyun-python-sdk-dbfs
python3-aliyun-python-sdk-companyreg
python3-aliyun-python-sdk-goodstech
python3-aliyun-python-sdk-cusanalytic_sc_online
python3-aliyun-python-sdk-config
python3-aliyun-python-sdk-schedulerx2
python3-aliyun-python-sdk-videoseg
python3-aliyun-python-sdk-cams
python3-aliyun-python-sdk-cloudwf
python3-aliyun-python-sdk-linkwan
python3-aliyun-python-sdk-geoip
python3-aliyun-python-sdk-aligreen-console
python3-aliyun-python-sdk-servicemesh
python3-aliyun-python-sdk-onsmqtt
python3-aliyun-python-sdk-outboundbot
python3-aliyun-python-sdk-pvtz
python3-aliyun-python-sdk-gpdb
python3-aliyun-python-sdk-das
python3-aliyun-python-sdk-adb
python3-aliyun-python-sdk-ivpd
python3-aliyun-python-sdk-cassandra
python3-aliyun-python-sdk-aegis
python3-aliyun-python-sdk-dybaseapi
python3-aliyun-python-sdk-videoenhan
python3-aliyun-python-sdk-cbn
python3-aliyun-python-sdk-imageaudit
python3-aliyun-python-sdk-teambition-aliyun
python3-aliyun-python-sdk-sls
python3-aliyun-python-sdk-dg
python3-aliyun-python-sdk-cdrs
python3-aliyun-python-sdk-ocr
python3-aliyun-python-sdk-aliyuncvc
python3-aliyun-python-sdk-objectdet
python3-aliyun-python-sdk-imageprocess
python3-aliyun-python-sdk-imagerecog
python3-aliyun-python-sdk-alinlp
python3-aliyun-python-sdk-unimkt
python3-aliyun-python-sdk-dbs
python3-aliyun-python-sdk-emap
python3-aliyun-python-sdk-viapiutils
python3-aliyun-python-sdk-videosearch
python3-aliyun-python-sdk-welfare-inner
python3-aliyun-python-sdk-democenter
python3-aliyun-python-sdk-amqp-open
python3-aliyun-python-sdk-voicenavigator
python3-aliyun-python-sdk-appmallsservice
python3-aliyun-python-sdk-mopen
python3-aliyun-python-sdk-imageenhan
python3-aliyun-python-sdk-sas
python3-aliyun-python-sdk-eci
python3-aliyun-python-sdk-multimediaai
python3-aliyun-python-sdk-dypnsapi
python3-aliyun-python-sdk-waf-openapi
python3-aliyun-python-sdk-imgsearch
python3-aliyun-python-sdk-reid
python3-aliyun-python-sdk-imageseg
python3-aliyun-python-sdk-cloudphoto
python3-aliyun-python-sdk-rdc
python3-aliyun-python-sdk-emas-appmonitor
python3-aliyun-python-sdk-ivision
python3-aliyun-python-sdk-linkface
python3-aliyun-python-sdk-petadata
python3-aliyun-python-sdk-xspace
python3-aliyun-python-sdk-trademark
python3-aliyun-python-sdk-chatbot
python3-aliyun-python-sdk-jarvis
python3-aliyun-python-sdk-rtc
python3-aliyun-python-sdk-csb
python3-Deprecated
python3-aliyun-python-sdk-facebody
python2-jsondiff
python3-jsondiff
python3-aliyun-python-sdk-dyplsapi
python3-websocket-client
python3-aliyun-python-sdk-ens
python3-aliyun-python-sdk-cspro
python3-aliyun-python-sdk-oos
python3-aliyun-python-sdk-quickbi-public
python3-aliyun-python-sdk-idsp
python3-aliyun-python-sdk-sae
python3-opentelemetry-api
python3-aliyun-python-sdk-smartag
python3-aliyun-python-sdk-teslamaxcompute
python2-googleapis-common-protos
python3-googleapis-common-protos
python3-aliyun-python-sdk-domain-intl
python3-aliyun-python-sdk-bssopenapi
python3-aliyun-python-sdk-snsuapi
python2-crcmod
python3-crcmod
python3-aliyun-python-sdk-fnf
python3-aliyun-python-sdk-polardb
python3-aliyun-python-sdk-devops-rdc
python3-aliyun-python-sdk-vs
python3-avro
python3-aliyun-python-sdk-dms-enterprise
python3-aliyun-python-sdk-ehpc
python3-google-api-core
python3-aliyun-python-sdk-imm
python2-grpcio
libgrpc++1
libgrpc8
python3-grpcio
grpc-devel
grpc-source
python2-grpcio-debuginfo
libgrpc8-debuginfo
grpc-devel-debuginfo
python3-grpcio-debuginfo
libgrpc++1-debuginfo
grpc-debuginfo
grpc-debugsource
python3-PyGithub
python3-aliyun-python-sdk-gts-phd
python3-aliyun-python-sdk-eais
python3-aliyun-python-sdk-clickhouse
python3-aliyun-python-sdk-imagesearch
python3-aliyun-python-sdk-airec
python3-aliyun-python-sdk-openanalytics-open
python3-aliyun-python-sdk-arms4finance
python-cryptography-debugsource
python-cryptography-debuginfo
python-cryptography
python3-aliyun-python-sdk-hpc
python3-aliyun-python-sdk-actiontrail
python3-aliyun-python-sdk-vcs
python3-aliyun-python-sdk-ccc
python3-aliyun-python-sdk-cloudesl
python3-aliyun-python-sdk-ubsms
python3-aliyun-python-sdk-jaq
python3-aliyun-python-sdk-retailcloud
python3-aliyun-python-sdk-market
python3-aliyun-python-sdk-cloudauth
python3-aliyun-python-sdk-pts
python3-aliyun-python-sdk-aas
python3-aliyun-python-sdk-sas-api
python3-aliyun-python-sdk-dysmsapi
python3-aliyun-python-sdk-httpdns
python3-aliyun-python-sdk-highddos
python3-aliyun-python-sdk-dcdn
python3-cryptography
python3-cryptography-debuginfo
python2-cryptography
python2-cryptography-debuginfo
python3-aliyun-python-sdk-yundun
python3-aliyun-python-sdk-crm
python3-aliyun-python-sdk-scdn
python3-aliyun-python-sdk-ess
python3-aliyun-python-sdk-foas
ovirt-hosted-engine-ha (Red Hat package)
python3-aliyun-python-sdk-rds
python3-aliyun-python-sdk-arms
python3-aliyun-python-sdk-alidns
python3-aliyun-python-sdk-mts
python3-aliyun-python-sdk-faas
python3-aliyun-python-sdk-cloudmarketing
python-cryptography-help
python3-aliyun-python-sdk-hbase
python3-aliyun-python-sdk-r-kvstore
python3-aliyun-python-sdk-core
python3-oss2
python3-aliyun-python-sdk-kms
python3-aliyun-python-sdk-vod
azure-cli-core
python3-requests
python2-requests
python3-aliyun-python-sdk-workorder
python3-aliyun-python-sdk-saf
python3-aliyun-python-sdk-sts
python3-aliyun-python-sdk-dyvmsapi
python3-aliyun-python-sdk-qualitycheck
python3-aliyun-python-sdk-vpc
python3-aliyun-python-sdk-elasticsearch
python3-aliyun-python-sdk-alimt
python3-aliyun-python-sdk-ons
python3-aliyun-python-sdk-ram
python-cryptography (Red Hat package)
python3-aliyun-python-sdk-dataworks-public
python3-aliyun-python-sdk-emr
python3-cryptography-vectors
python2-cryptography-vectors
python3-aliyun-python-sdk-slb
python-cryptography-vectors
python3-aliyun-python-sdk-dds
python3-aliyun-python-sdk-ros
python3-aliyun-python-sdk-cdn
python3-aliyun-python-sdk-green
python3-aliyun-python-sdk-et-industry-openapi
python3-aliyun-python-sdk-idrsservice
python3-aliyun-python-sdk-status
protobuf-java
libprotoc20
python2-protobuf
python3-protobuf
libprotobuf20
protobuf-debugsource
libprotoc20-32bit
libprotobuf-lite20-32bit
libprotobuf20-32bit
protobuf-devel-debuginfo
libprotobuf-lite20
protobuf-source
libprotobuf-lite20-debuginfo
libprotoc20-debuginfo
protobuf-devel
libprotobuf20-debuginfo
python3-aliyun-python-sdk-live
python3-aliyun-python-sdk-nas
python3-pytest
python3-aliyun-python-sdk-push
python3-aliyun-python-sdk-domain
python3-aliyun-python-sdk-edas
python3-aliyun-python-sdk-ots
python3-aliyun-python-sdk-cr
python3-zope.interface-debuginfo
python-zope.interface-debuginfo
python-zope.interface-debugsource
python3-zope.interface
redhat-virtualization-host (Red Hat package)
python3-aliyun-python-sdk-cs
python3-aliyun-python-sdk-cloudapi
python3-aliyun-python-sdk-ecs
python3-aliyun-python-sdk-industry-brain
python3-aliyun-python-sdk-dts
python3-aliyun-python-sdk-ft
python-psutil-debugsource
python3-psutil
python2-psutil
python-psutil-debuginfo
python2-psutil-debuginfo
python3-psutil-debuginfo
python3-aliyun-python-sdk-cms
python3-aliyun-python-sdk-iot
python-websockets-debugsource
python3-websockets
python3-websockets-debuginfo
python3-humanfriendly
python2-humanfriendly
python3-constantly
python3-hyperlink
python3-incremental
python3-Twisted
python3-Twisted-debuginfo
dev-python/cryptography
python3-aliyun-python-sdk-cas
python3-aliyun-python-sdk-polardbx
python3-aliyun-python-sdk-drds
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
Spectrum Discover
Qradar Advisor
Juniper Cloud Native Router
Red Hat Virtualization
OpenShift Virtualization
Red Hat Virtualization Host
IBM Qradar SIEM
MySQL Shell
Junos cRPD

Install updates from vendor's website.

cryptography - update to 3.3.2
scap-security-guide (Red Hat package) - update to 0.1.54-1.el8ev
cockpit-ovirt (Red Hat package) - update to 0.15.0-2.el8ev
ObjectScale - update to 1.3.0
imgbased (Red Hat package) - update to 1.2.19-1.el8ev
Spectrum Discover - addressed in versions 2.0.3.5, 2.0.4.2
redhat-release-virtualization-host (Red Hat package) - update to 4.4.6-1.el8ev
Dell Policy Manager for Secure Connect Gateway (SCG) - update to 5.12.00.00
IBM Qradar SIEM - update to 7.5.0 Update Pack 8
python3-aliyun-python-sdk-hivisengine - update to 0.0.2-150100.3.7.5
python3-aliyun-python-sdk-hiknoengine - update to 0.0.2-150100.3.7.5
python3-aliyun-python-sdk-hbr - update to 0.0.2-150100.3.7.5
python3-aliyun-python-sdk-oms - update to 0.0.3-150100.3.7.4
python3-aliyun-python-sdk-ossadmin - update to 0.0.3-150100.3.7.4
python3-aliyun-python-sdk-risk - update to 0.0.3-150100.3.7.4
python3-aliyun-python-sdk-eas - update to 0.0.3-150100.3.7.5
python3-aliyun-python-sdk-ocs - update to 0.0.4-150100.3.7.4
python3-aliyun-python-sdk-bss - update to 0.0.4-150100.3.7.5
python3-aliyun-python-sdk-codeup - update to 0.0.8-150100.3.7.5
python3-aliyun-python-sdk-nlp-automl - update to 0.0.9-150100.3.7.5
python3-opencensus-ext-threading - update to 0.1.2-150100.3.3.3
python3-opencensus-context - update to 0.1.2-150100.3.3.3
python2-grpcio-gcp - update to 0.2.2-150100.3.3.3
python3-aiocontextvars - update to 0.2.2-150100.3.3.3
python3-grpcio-gcp - update to 0.2.2-150100.3.3.3
python3-aliyun-python-sdk-xtrace - update to 0.2.2-150100.3.7.4
python3-Automat - update to 0.6.0-150000.3.4.1
python3-aliyun-python-sdk-ledgerdb - update to 0.7.0-150100.3.7.5
python3-pytest-asyncio - update to 0.8.0-150100.3.3.3
python3-opencensus - update to 0.8.0-150100.3.3.3
python3-knack - update to 0.9.0-150100.3.7.3
python3-aliyun-python-sdk-opensearch - update to 0.9.0-150100.3.7.4
python3-aliyun-python-sdk-tdsr - update to 0.9.2-150100.3.3.4
python3-aliyun-python-sdk-sgw - update to 1.0.0-150100.3.3.4
python3-aliyun-python-sdk-gdb - update to 1.0.0-150100.3.3.5
python3-aliyun-python-sdk-metering - update to 1.0.0-150100.3.3.5
python3-aliyun-python-sdk-mpaas - update to 1.0.0-150100.3.3.5
python3-aliyun-python-sdk-paistudio - update to 1.0.0-150100.3.7.4
python3-aliyun-python-sdk-yundun-ds - update to 1.0.0-150100.3.7.4
python3-aliyun-python-sdk-webplus - update to 1.0.0-150100.3.7.4
python3-aliyun-python-sdk - update to 1.0.0-150100.3.7.4
python3-aliyun-python-sdk-resourcemanager - update to 1.0.0-150100.3.7.4
python3-aliyun-python-sdk-acms-open - update to 1.0.0-150100.3.7.5
python3-aliyun-python-sdk-address-purification - update to 1.0.0-150100.3.7.5
python3-aliyun-python-sdk-netana - update to 1.0.0-150100.3.7.5
python3-aliyun-python-sdk-linkedmall - update to 1.0.0-150100.3.7.5
python3-aliyun-python-sdk-iqa - update to 1.0.0-150100.3.7.5
python3-aliyun-python-sdk-cloudgame - update to 1.0.0-150100.3.7.5
python3-aliyun-python-sdk-smarthosting - update to 1.0.1-150100.3.3.4
python3-aliyun-python-sdk-safconsole - update to 1.0.1-150100.3.3.4
python3-aliyun-python-sdk-hitsdb - update to 1.0.1-150100.3.3.5
python3-aliyun-python-sdk-ddoscoo - update to 1.0.1-150100.3.3.5
python3-aliyun-python-sdk-openanalytics - update to 1.0.1-150100.3.7.4
python3-aliyun-python-sdk-sddp - update to 1.0.1-150100.3.7.4
python3-aliyun-python-sdk-tag - update to 1.0.1-150100.3.7.4
python3-aliyun-python-sdk-productcatalog - update to 1.0.1-150100.3.7.4
python3-aliyun-python-sdk-visionai-poc - update to 1.0.1-150100.3.7.4
python3-aliyun-python-sdk-uis - update to 1.0.1-150100.3.7.4
python3-aliyun-python-sdk-teslastream - update to 1.0.1-150100.3.7.4
python3-aliyun-python-sdk-visionai - update to 1.0.1-150100.3.7.4
python3-aliyun-python-sdk-lubancloud - update to 1.0.1-150100.3.7.5
python3-aliyun-python-sdk-nls-cloud-meta - update to 1.0.1-150100.3.7.5
python3-aliyun-python-sdk-acm - update to 1.0.1-150100.3.7.5
python3-aliyun-python-sdk-afs - update to 1.0.1-150100.3.7.5
python3-aliyun-python-sdk-hsm - update to 1.0.1-150100.3.7.5
python3-aliyun-python-sdk-brinekingdom - update to 1.0.1-150100.3.7.5
python3-aliyun-python-sdk-jarvis-public - update to 1.0.1-150100.3.7.5
python3-aliyun-python-sdk-ccs - update to 1.0.1-150100.3.7.5
python3-aliyun-python-sdk-baas - update to 1.0.1-150100.3.7.5
python3-aliyun-python-sdk-privatelink - update to 1.0.2-150100.3.3.4
python3-aliyun-python-sdk-smc - update to 1.0.2-150100.3.7.4
python3-aliyun-python-sdk-videorecog - update to 1.0.2-150100.3.7.4
python3-aliyun-python-sdk-tesladam - update to 1.0.2-150100.3.7.4
python3-aliyun-python-sdk-dbfs - update to 1.0.2-150100.3.7.5
python3-aliyun-python-sdk-companyreg - update to 1.0.2-150100.3.7.5
python3-aliyun-python-sdk-goodstech - update to 1.0.2-150100.3.7.5
python3-aliyun-python-sdk-cusanalytic_sc_online - update to 1.0.2-150100.3.7.5
python3-aliyun-python-sdk-config - update to 1.0.3-150100.3.3.5
python3-aliyun-python-sdk-schedulerx2 - update to 1.0.3-150100.3.7.4
python3-aliyun-python-sdk-videoseg - update to 1.0.3-150100.3.7.4
python3-aliyun-python-sdk-cams - update to 1.0.3-150100.3.7.5
python3-aliyun-python-sdk-cloudwf - update to 1.0.3-150100.3.7.5
python3-aliyun-python-sdk-linkwan - update to 1.0.3-150100.3.7.5
python3-aliyun-python-sdk-geoip - update to 1.0.3-150100.3.7.5
python3-aliyun-python-sdk-aligreen-console - update to 1.0.3-150100.3.7.5
python3-aliyun-python-sdk-servicemesh - update to 1.0.5-150100.3.3.4
python3-aliyun-python-sdk-onsmqtt - update to 1.0.5-150100.3.7.4
python3-aliyun-python-sdk-outboundbot - update to 1.0.5-150100.3.7.4
python3-aliyun-python-sdk-pvtz - update to 1.0.5-150100.3.7.4
python3-aliyun-python-sdk-gpdb - update to 1.0.5-150100.3.7.5
python3-aliyun-python-sdk-das - update to 1.0.5-150100.3.7.5
python3-aliyun-python-sdk-adb - update to 1.0.5-150100.3.7.5
python3-aliyun-python-sdk-ivpd - update to 1.0.6.1-150100.3.7.5
python3-aliyun-python-sdk-cassandra - update to 1.0.6-150100.3.7.5
python3-aliyun-python-sdk-aegis - update to 1.0.6-150100.3.7.5
python3-aliyun-python-sdk-dybaseapi - update to 1.0.6-150100.3.7.5
python3-aliyun-python-sdk-videoenhan - update to 1.0.7-150100.3.7.4
python3-aliyun-python-sdk-cbn - update to 1.0.7-150100.3.7.5
python3-aliyun-python-sdk-imageaudit - update to 1.0.7-150100.3.7.5
python3-aliyun-python-sdk-teambition-aliyun - update to 1.0.8-150100.3.3.4
python3-aliyun-python-sdk-sls - update to 1.0.8-150100.3.3.4
python3-aliyun-python-sdk-dg - update to 1.0.9-150100.3.3.5
python3-aliyun-python-sdk-cdrs - update to 1.0.9-150100.3.3.5
python3-aliyun-python-sdk-ocr - update to 1.0.9-150100.3.7.4
python3-aliyun-python-sdk-aliyuncvc - update to 1.0.10.2-150100.3.7.5
python3-aliyun-python-sdk-objectdet - update to 1.0.10-150100.3.7.4
python3-aliyun-python-sdk-imageprocess - update to 1.0.10-150100.3.7.5
python3-aliyun-python-sdk-imagerecog - update to 1.0.13-150100.3.7.5
python3-aliyun-python-sdk-alinlp - update to 1.0.16-150100.3.7.5
python3-aliyun-python-sdk-unimkt - update to 1.0.24-150100.3.7.4
python3-aliyun-python-sdk-dbs - update to 1.0.29-150100.3.7.5
python3-aliyun-python-sdk-emap - update to 1.0-150100.3.3.5
python3-aliyun-python-sdk-viapiutils - update to 1.0-150100.3.7.4
python3-aliyun-python-sdk-videosearch - update to 1.1.0-150100.3.7.4
python3-aliyun-python-sdk-welfare-inner - update to 1.1.0-150100.3.7.4
python3-aliyun-python-sdk-democenter - update to 1.1.0-150100.3.7.5
python3-aliyun-python-sdk-amqp-open - update to 1.1.1-150100.3.5.5
python3-aliyun-python-sdk-voicenavigator - update to 1.1.1-150100.3.7.4
python3-aliyun-python-sdk-appmallsservice - update to 1.1.1-150100.3.7.5
python3-aliyun-python-sdk-mopen - update to 1.1.1-150100.3.7.5
python3-aliyun-python-sdk-imageenhan - update to 1.1.2-150100.3.7.5
python3-aliyun-python-sdk-sas - update to 1.1.3-150100.3.7.4
python3-aliyun-python-sdk-eci - update to 1.1.3-150100.3.7.5
python3-aliyun-python-sdk-multimediaai - update to 1.1.3-150100.3.7.5
python3-aliyun-python-sdk-dypnsapi - update to 1.1.3-150100.3.7.5
python3-aliyun-python-sdk-waf-openapi - update to 1.1.4-150100.3.7.4
python3-aliyun-python-sdk-imgsearch - update to 1.1.6-150100.3.7.5
python3-aliyun-python-sdk-reid - update to 1.1.8.5-150100.3.7.4
python3-aliyun-python-sdk-imageseg - update to 1.1.8-150100.3.7.5
python3-aliyun-python-sdk-cloudphoto - update to 1.1.19-150100.3.7.5
python3-aliyun-python-sdk-rdc - update to 1.1-150100.3.7.4
python3-aliyun-python-sdk-emas-appmonitor - update to 1.2.0-150100.3.3.5
python3-aliyun-python-sdk-ivision - update to 1.2.0-150100.3.7.5
python3-aliyun-python-sdk-linkface - update to 1.2.0-150100.3.7.5
python3-aliyun-python-sdk-petadata - update to 1.2.1-150100.3.7.4
python3-aliyun-python-sdk-xspace - update to 1.2.1-150100.3.7.4
python3-aliyun-python-sdk-trademark - update to 1.2.1-150100.3.7.4
python3-aliyun-python-sdk-chatbot - update to 1.2.1-150100.3.7.5
python3-aliyun-python-sdk-jarvis - update to 1.2.4-150100.3.7.5
python3-aliyun-python-sdk-rtc - update to 1.2.5-150100.3.7.4
python3-aliyun-python-sdk-csb - update to 1.2.9-150100.3.7.5
python3-Deprecated - update to 1.2.13-150100.3.3.3
python3-aliyun-python-sdk-facebody - update to 1.2.15-150100.3.7.5
python2-jsondiff - update to 1.3.0-150100.3.6.3
python3-jsondiff - update to 1.3.0-150100.3.6.3
python3-aliyun-python-sdk-dyplsapi - update to 1.3.0-150100.3.7.5
python3-websocket-client - update to 1.3.2-150100.6.7.3
python3-aliyun-python-sdk-ens - update to 1.3.3-150100.3.7.5
python3-aliyun-python-sdk-cspro - update to 1.3.9-150100.3.7.5
python3-aliyun-python-sdk-oos - update to 1.4.0-150100.3.7.4
python3-aliyun-python-sdk-quickbi-public - update to 1.4.0-150100.3.7.4
python3-aliyun-python-sdk-idsp - update to 1.4-150100.3.3.5
python3-aliyun-python-sdk-sae - update to 1.5.0.0-150100.3.7.4
python3-opentelemetry-api - update to 1.5.0-150100.3.3.3
python3-aliyun-python-sdk-smartag - update to 1.5.4-150100.3.7.4
python3-aliyun-python-sdk-teslamaxcompute - update to 1.5.5-150100.3.7.4
python2-googleapis-common-protos - update to 1.6.0-150100.3.3.3
python3-googleapis-common-protos - update to 1.6.0-150100.3.3.3
python3-aliyun-python-sdk-domain-intl - update to 1.6.0-150100.3.7.5
python3-aliyun-python-sdk-bssopenapi - update to 1.6.2-150100.3.7.5
python3-aliyun-python-sdk-snsuapi - update to 1.7.1-150100.3.7.4
python2-crcmod - update to 1.7-150100.3.3.4
python3-crcmod - update to 1.7-150100.3.3.4
python3-aliyun-python-sdk-fnf - update to 1.8.0-150100.3.7.5
python3-aliyun-python-sdk-polardb - update to 1.8.3-150100.3.7.4
python3-aliyun-python-sdk-devops-rdc - update to 1.9.0-150100.3.7.5
python3-aliyun-python-sdk-vs - update to 1.10.2-150100.3.7.4
python3-avro - update to 1.11.0-150100.3.3.3
python3-aliyun-python-sdk-dms-enterprise - update to 1.12.0-150100.3.7.5
python3-aliyun-python-sdk-ehpc - update to 1.14.1-150100.3.7.5
python3-google-api-core - update to 1.14.2-150100.3.3.3
python3-aliyun-python-sdk-imm - update to 1.23.0-150100.3.7.5
python2-grpcio - update to 1.25.0-150100.3.3.3
libgrpc++1 - update to 1.25.0-150100.3.3.3
libgrpc8 - update to 1.25.0-150100.3.3.3
python3-grpcio - update to 1.25.0-150100.3.3.3
grpc-devel - update to 1.25.0-150100.3.3.3
grpc-source - update to 1.25.0-150100.3.3.3
python2-grpcio-debuginfo - update to 1.25.0-150100.3.3.3
libgrpc8-debuginfo - update to 1.25.0-150100.3.3.3
grpc-devel-debuginfo - update to 1.25.0-150100.3.3.3
python3-grpcio-debuginfo - update to 1.25.0-150100.3.3.3
libgrpc++1-debuginfo - update to 1.25.0-150100.3.3.3
grpc-debuginfo - update to 1.25.0-150100.3.3.3
grpc-debugsource - update to 1.25.0-150100.3.3.3
python3-PyGithub - update to 1.43.5-150100.3.3.3
python3-aliyun-python-sdk-gts-phd - update to 1-150100.3.7.5
python3-aliyun-python-sdk-eais - update to 2.0.0-150100.3.3.5
python3-aliyun-python-sdk-clickhouse - update to 2.0.0-150100.3.7.5
python3-aliyun-python-sdk-imagesearch - update to 2.0.0-150100.3.7.5
python3-aliyun-python-sdk-airec - update to 2.0.0-150100.3.7.5
python3-aliyun-python-sdk-openanalytics-open - update to 2.0.2-150100.3.7.4
python3-aliyun-python-sdk-arms4finance - update to 2.0.2-150100.3.7.5
python-cryptography-debugsource - addressed in versions 2.0.3-3.10.1, 2.1.4-4.9.2, 2.1.4-7.34.1, 2.3.1-3.3.1, 3.3.2-150100.7.15.3, 3.3.2-150200.16.1
python-cryptography-debuginfo - addressed in versions 2.0.3-3.10.1, 2.1.4-4.9.2, 2.1.4-7.34.1, 2.3.1-3.3.1, 3.3.2-150100.7.15.3, 3.3.2-150200.16.1
python-cryptography - addressed in versions 2.0.3-3.10.1, 2.1.4-7.34.1, 2.3.1-3.3.1
python3-aliyun-python-sdk-hpc - update to 2.0.3-150100.3.7.5
python3-aliyun-python-sdk-actiontrail - update to 2.0.3-150100.3.7.5
python3-aliyun-python-sdk-vcs - update to 2.0.4-150100.3.7.4
python3-aliyun-python-sdk-ccc - update to 2.0.4-150100.3.7.5
python3-aliyun-python-sdk-cloudesl - update to 2.0.4-150100.3.7.5
python3-aliyun-python-sdk-ubsms - update to 2.0.5-150100.3.7.4
python3-aliyun-python-sdk-jaq - update to 2.0.7-150100.3.7.5
python3-aliyun-python-sdk-retailcloud - update to 2.0.12-150100.3.7.4
python3-aliyun-python-sdk-market - update to 2.0.24-150100.3.7.5
python3-aliyun-python-sdk-cloudauth - update to 2.0.26-150100.3.7.5
python3-aliyun-python-sdk-pts - update to 2.1.0-150100.3.7.4
python3-aliyun-python-sdk-aas - update to 2.1.1-150100.3.5.5
python3-aliyun-python-sdk-sas-api - update to 2.1.1-150100.3.7.4
python3-aliyun-python-sdk-dysmsapi - update to 2.1.1-150100.3.7.5
python3-aliyun-python-sdk-httpdns - update to 2.1.1-150100.3.7.5
python3-aliyun-python-sdk-highddos - update to 2.1.2-150100.3.7.5
python3-aliyun-python-sdk-dcdn - update to 2.1.2-150100.3.7.5
python3-cryptography - addressed in versions 2.1.4-4.9.2, 2.1.4-7.34.1, 3.3.2-150100.7.15.3, 3.3.2-150200.16.1
python3-cryptography-debuginfo - addressed in versions 2.1.4-4.9.2, 2.1.4-7.34.1, 3.3.2-150100.7.15.3, 3.3.2-150200.16.1
python2-cryptography - addressed in versions 2.1.4-4.9.2, 3.3.2-150100.7.15.3, 3.3.2-150200.16.1
python2-cryptography-debuginfo - addressed in versions 2.1.4-4.9.2, 3.3.2-150100.7.15.3, 3.3.2-150200.16.1
python3-aliyun-python-sdk-yundun - update to 2.1.4-150100.3.7.4
python3-aliyun-python-sdk-crm - update to 2.2.1-150100.3.7.5
python3-aliyun-python-sdk-scdn - update to 2.2.3-150100.3.7.4
python3-aliyun-python-sdk-ess - update to 2.3.3-150100.3.7.5
python3-aliyun-python-sdk-foas - update to 2.3.3-150100.3.7.5
ovirt-hosted-engine-ha (Red Hat package) - update to 2.4.7-1.el8ev
python3-aliyun-python-sdk-rds - update to 2.5.8-150100.3.7.4
python3-aliyun-python-sdk-arms - update to 2.5.22-150100.3.7.5
Qradar Advisor - update to 2.6.2
OpenShift Virtualization - addressed in versions 2.6.6, 4.8.0
python3-aliyun-python-sdk-alidns - update to 2.6.20-150100.3.7.5
python3-aliyun-python-sdk-mts - update to 2.7.6-150100.3.7.5
python3-aliyun-python-sdk-faas - update to 2.7.11-150100.3.7.5
python3-aliyun-python-sdk-cloudmarketing - update to 2.7.16-150100.3.7.5
python3-cryptography - update to 2.9.2-2
python-cryptography-debugsource - update to 2.9.2-2
python-cryptography-help - update to 2.9.2-2
python-cryptography-debuginfo - update to 2.9.2-2
python-cryptography - update to 2.9.2-2
python2-cryptography - update to 2.9.2-2
python3-aliyun-python-sdk-hbase - update to 2.9.2-150100.3.7.5
python3-aliyun-python-sdk-r-kvstore - update to 2.13.0-150100.3.7.4
python3-aliyun-python-sdk-core - update to 2.13.30-150100.3.7.5
python3-oss2 - update to 2.14.0-150100.3.3.4
python3-aliyun-python-sdk-kms - update to 2.14.0-150100.3.7.5
python3-aliyun-python-sdk-vod - update to 2.15.12-150100.3.7.4
azure-cli-core - update to 2.17.1-150100.6.18.1
python3-requests - update to 2.25.1-150100.6.13.3
python2-requests - update to 2.25.1-150100.6.13.3
python3-aliyun-python-sdk-workorder - update to 3.0.0-150100.3.7.4
python3-aliyun-python-sdk-saf - update to 3.0.2-150100.3.7.4
python3-aliyun-python-sdk-sts - update to 3.0.2-150100.3.7.4
python3-aliyun-python-sdk-dyvmsapi - update to 3.0.2-150100.3.7.5
python3-aliyun-python-sdk-qualitycheck - update to 3.0.9-150100.3.7.4
python3-aliyun-python-sdk-vpc - update to 3.0.12-150100.3.7.4
QRadar Deployment Intelligence App - update to 3.0.16
python3-aliyun-python-sdk-elasticsearch - update to 3.0.20-150100.3.7.5
python3-aliyun-python-sdk-alimt - update to 3.0.30-150100.3.7.5
python3-aliyun-python-sdk-ons - update to 3.1.6-150100.3.7.4
python3-aliyun-python-sdk-ram - update to 3.2.0-150100.3.7.4
python-cryptography - addressed in versions 3.2.1-2.fc33, 3.4.1-1.fc34
python-cryptography (Red Hat package) - update to 3.2.1-4.el8
python3-aliyun-python-sdk-dataworks-public - update to 3.2.6-150100.3.7.5
python3-aliyun-python-sdk-emr - update to 3.3.2-150100.3.7.5
python3-cryptography-vectors - update to 3.3.2-150100.3.11.3
python2-cryptography-vectors - update to 3.3.2-150100.3.11.3
python3-aliyun-python-sdk-slb - update to 3.3.3-150100.3.7.4
python-cryptography-vectors - update to 3.4.1-1.fc34
python3-aliyun-python-sdk-dds - update to 3.5.0-150100.3.7.5
python3-aliyun-python-sdk-ros - update to 3.6.0-150100.3.7.4
PowerStore T - update to 3.6.1.2-2315284
python3-aliyun-python-sdk-cdn - update to 3.6.1-150100.3.7.5
python3-aliyun-python-sdk-green - update to 3.6.3-150100.3.7.5
python3-aliyun-python-sdk-et-industry-openapi - update to 3.6-150100.3.3.5
python3-aliyun-python-sdk-idrsservice - update to 3.7.3-150100.3.3.5
python3-aliyun-python-sdk-status - update to 3.7-150100.3.7.4
protobuf-java - update to 3.9.2-150100.8.3.3
libprotoc20 - update to 3.9.2-150100.8.3.3
python2-protobuf - update to 3.9.2-150100.8.3.3
python3-protobuf - update to 3.9.2-150100.8.3.3
libprotobuf20 - update to 3.9.2-150100.8.3.3
protobuf-debugsource - update to 3.9.2-150100.8.3.3
libprotoc20-32bit - update to 3.9.2-150100.8.3.3
libprotobuf-lite20-32bit - update to 3.9.2-150100.8.3.3
libprotobuf20-32bit - update to 3.9.2-150100.8.3.3
protobuf-devel-debuginfo - update to 3.9.2-150100.8.3.3
libprotobuf-lite20 - update to 3.9.2-150100.8.3.3
protobuf-source - update to 3.9.2-150100.8.3.3
libprotobuf-lite20-debuginfo - update to 3.9.2-150100.8.3.3
libprotoc20-debuginfo - update to 3.9.2-150100.8.3.3
protobuf-devel - update to 3.9.2-150100.8.3.3
libprotobuf20-debuginfo - update to 3.9.2-150100.8.3.3
python3-aliyun-python-sdk-live - update to 3.9.5-150100.3.7.5
python3-aliyun-python-sdk-nas - update to 3.10.0-150100.3.7.5
python3-pytest - update to 3.10.1-150000.7.5.1
python3-aliyun-python-sdk-push - update to 3.13.6-150100.3.7.4
python3-aliyun-python-sdk-domain - update to 3.14.4-150100.3.7.5
python3-aliyun-python-sdk-edas - update to 3.15.2-150100.3.7.5
Dell EMC PowerStore Family Operating System - update to 4.0.0.0-2284811
python3-aliyun-python-sdk-ots - update to 4.0.1-150100.3.7.4
python3-aliyun-python-sdk-cr - update to 4.1.2-150100.3.7.5
python3-zope.interface-debuginfo - update to 4.4.2-150000.3.4.1
python-zope.interface-debuginfo - update to 4.4.2-150000.3.4.1
python-zope.interface-debugsource - update to 4.4.2-150000.3.4.1
python3-zope.interface - update to 4.4.2-150000.3.4.1
redhat-virtualization-host (Red Hat package) - update to 4.4.6-20210527.3.el8_4
python3-aliyun-python-sdk-cs - update to 4.8.1-150100.3.7.5
python3-aliyun-python-sdk-cloudapi - update to 4.9.2-150100.3.7.5
python3-aliyun-python-sdk-ecs - update to 4.23.9-150100.3.7.5
python3-aliyun-python-sdk-industry-brain - update to 5.0.52-150100.3.7.5
python3-aliyun-python-sdk-dts - update to 5.1.9-150100.3.7.5
python3-aliyun-python-sdk-ft - update to 5.6.7-150100.3.7.5
python-psutil-debugsource - update to 5.9.1-150100.6.6.3
python3-psutil - update to 5.9.1-150100.6.6.3
python2-psutil - update to 5.9.1-150100.6.6.3
python-psutil-debuginfo - update to 5.9.1-150100.6.6.3
python2-psutil-debuginfo - update to 5.9.1-150100.6.6.3
python3-psutil-debuginfo - update to 5.9.1-150100.6.6.3
python3-aliyun-python-sdk-cms - update to 7.0.18-150100.3.7.5
python3-aliyun-python-sdk-iot - update to 8.21.1-150100.3.7.5
python-websockets-debugsource - update to 9.1-150100.3.3.3
python3-websockets - update to 9.1-150100.3.3.3
python3-websockets-debuginfo - update to 9.1-150100.3.3.3
python3-humanfriendly - update to 10.0-150100.6.3.3
python2-humanfriendly - update to 10.0-150100.6.3.3
python3-constantly - update to 15.1.0-150000.3.4.1
python3-hyperlink - update to 17.2.1-150000.3.4.1
python3-incremental - update to 17.5.0-150000.3.4.1
python3-Twisted - update to 17.9.0-150000.3.8.1
python3-Twisted-debuginfo - update to 17.9.0-150000.3.8.1
Juniper Cloud Native Router - update to 23.4R1
Junos cRPD - update to 23.4R1
dev-python/cryptography - update to 42.0.4
python3-aliyun-python-sdk-cas - update to 20180713_0114-150100.3.7.5
python3-aliyun-python-sdk-polardbx - update to 20201028-150100.3.3.4
python3-aliyun-python-sdk-drds - update to 20201028-150100.3.7.5

• https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst
• https://github.com/pyca/cryptography/compare/3.3.1...3.3.2
• https://github.com/pyca/cryptography/issues/5615
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/

• Remote code execution in cryptography package for Python
• Arch Linux update for python-cryptography
• Red Hat Enterprise Linux 8 update for python-cryptography
• Multiple vulnerabilities in Red Hat Virtualization for RHEL 8
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Multiple vulnerabilities in Dell Policy Manager for Secure Connect Gateway
• Multiple vulnerabilities in IBM Spectrum Discover
• Multiple vulnerabilities in IBM QRadar Advisor
• Multiple vulnerabilities in MySQL Shell
• SUSE update for python-cryptography, python-cryptography-vectors
• SUSE update for python-cryptography
• SUSE update for python-cryptography
• SUSE update for python-cryptography
• SUSE update for python-cryptography
• SUSE update for python-crcmod, python-cryptography, python-cryptography-vectors
• SUSE update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, pyt
• SUSE update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, pyt
• openEuler update for python-cryptography
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Juniper Cloud Native Router
• Multiple vulnerabilities in Juniper Networks Junos cRPD
• Multiple vulnerabilities in Dell PowerStore Family
• Gentoo update for cryptography
• Multiple vulnerabilities in Dell PowerStoreT OS
• Multiple vulnerabilities in OpenShift Virtualization 4.8
• Multiple vulnerabilities in OpenShift Virtualization 2.6
• Fedora 34 update for python-cryptography, python-cryptography-vectors
• Fedora 33 update for python-cryptography
• Multiple vulnerabilities in IBM QRadar Deployment Intelligence App
• Multiple vulnerabilities in Dell ObjectScale