ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2025.0069
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2025-0069)
Resumen:	The remote host is missing an update for the 'openssl, python-cryptography' package(s) announced via the MGASA-2025-0069 advisory.
Descripción:	Summary: The remote host is missing an update for the 'openssl, python-cryptography' package(s) announced via the MGASA-2025-0069 advisory. Vulnerability Insight: Cryptography vulnerable to NULL-dereference when loading PKCS7 certificates. (CVE-2023-49083) Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659. (CVE-2023-50782) Cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override. (CVE-2024-26130) Affected Software/OS: 'openssl, python-cryptography' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-49083 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMNTYMUGFJSDBYBU22FUYBHFRZODRKXV/ https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a https://github.com/pyca/cryptography/pull/9926 https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97 Common Vulnerability Exposure (CVE) ID: CVE-2023-50782 RHBZ#2254432 https://bugzilla.redhat.com/show_bug.cgi?id=2254432 https://access.redhat.com/security/cve/CVE-2023-50782 Common Vulnerability Exposure (CVE) ID: CVE-2024-26130 https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55 https://github.com/pyca/cryptography/pull/10423 https://github.com/pyca/cryptography/security/advisories/GHSA-6vqw-3v5j-54x4
Copyright	Copyright (C) 2025 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.