Synopsis

Moderate: python-cryptography security update

Type/Severity

Security Advisory: Moderate

Topic

An update for python-cryptography is now available for Red Hat OpenStack Platform 13.0 (Queens).

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers.

Security Fix(es):

• python-cryptography: GCM tag forgery via truncated tag in finalize_with_tag API (CVE-2018-10903)
  

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenStack 13 x86_64
• Red Hat OpenStack for IBM Power 13 ppc64le
• Red Hat OpenStack Director Deployment Tools 13 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 13 ppc64le
• Red Hat OpenStack - Extended Update Support 13 for RHEL 7.6 x86_64

Fixes

• BZ - 1602931 - CVE-2018-10903 python-cryptography: GCM tag forgery via truncated tag in finalize_with_tag API

CVEs

• CVE-2018-10903

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat OpenStack 13

SRPM
python-cryptography-2.1.4-3.el7ost.src.rpm	SHA-256: 14db238bb3e153d5383331b38df58525ff28f29c593b43c9239942aab131b886
x86_64
python-cryptography-debuginfo-2.1.4-3.el7ost.x86_64.rpm	SHA-256: 5ba47dcfa8688befa167952e5693ca94cd911601cee5ddd805453868d015c905
python2-cryptography-2.1.4-3.el7ost.x86_64.rpm	SHA-256: 955bedf267c95d5c20ec4f550c86a25f078485ba374353a2a4f4dd8058c15d16

Red Hat OpenStack for IBM Power 13

SRPM
python-cryptography-2.1.4-3.el7ost.src.rpm	SHA-256: 14db238bb3e153d5383331b38df58525ff28f29c593b43c9239942aab131b886
ppc64le
python-cryptography-debuginfo-2.1.4-3.el7ost.ppc64le.rpm	SHA-256: 3f9ecfdd1263f1ec6969cb40c943ac7c130f99db2ab0e25ecbfcd8d216c8a1e6
python2-cryptography-2.1.4-3.el7ost.ppc64le.rpm	SHA-256: 3f5aaf16f6f542f9056075efa73a32244a26a99eb9c76fb8c5b0c6b1fd2aa7f5

Red Hat OpenStack Director Deployment Tools 13

SRPM
python-cryptography-2.1.4-3.el7ost.src.rpm	SHA-256: 14db238bb3e153d5383331b38df58525ff28f29c593b43c9239942aab131b886
x86_64
python-cryptography-debuginfo-2.1.4-3.el7ost.x86_64.rpm	SHA-256: 5ba47dcfa8688befa167952e5693ca94cd911601cee5ddd805453868d015c905
python2-cryptography-2.1.4-3.el7ost.x86_64.rpm	SHA-256: 955bedf267c95d5c20ec4f550c86a25f078485ba374353a2a4f4dd8058c15d16

Red Hat OpenStack Director Deployment Tools for IBM Power LE 13

SRPM
python-cryptography-2.1.4-3.el7ost.src.rpm	SHA-256: 14db238bb3e153d5383331b38df58525ff28f29c593b43c9239942aab131b886
ppc64le
python-cryptography-debuginfo-2.1.4-3.el7ost.ppc64le.rpm	SHA-256: 3f9ecfdd1263f1ec6969cb40c943ac7c130f99db2ab0e25ecbfcd8d216c8a1e6
python2-cryptography-2.1.4-3.el7ost.ppc64le.rpm	SHA-256: 3f5aaf16f6f542f9056075efa73a32244a26a99eb9c76fb8c5b0c6b1fd2aa7f5

Red Hat OpenStack - Extended Update Support 13 for RHEL 7.6

SRPM
python-cryptography-2.1.4-3.el7ost.src.rpm	SHA-256: 14db238bb3e153d5383331b38df58525ff28f29c593b43c9239942aab131b886
x86_64
python-cryptography-debuginfo-2.1.4-3.el7ost.x86_64.rpm	SHA-256: 5ba47dcfa8688befa167952e5693ca94cd911601cee5ddd805453868d015c905
python2-cryptography-2.1.4-3.el7ost.x86_64.rpm	SHA-256: 955bedf267c95d5c20ec4f550c86a25f078485ba374353a2a4f4dd8058c15d16