CVE ID:	CVE-2020-36242
Description:	In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2021.0696.1   1.3.6.1.4.1.25623.1.1.2.2021.2208   1.3.6.1.4.1.25623.1.1.4.2021.0594.1   1.3.6.1.4.1.25623.1.1.2.2021.2278   1.3.6.1.4.1.25623.1.1.2.2021.2178   1.3.6.1.4.1.25623.1.1.10.2021.0129   1.3.6.1.4.1.25623.1.0.853676   1.3.6.1.4.1.25623.1.1.4.2021.0675.1   1.3.6.1.4.1.25623.1.0.878930   1.3.6.1.4.1.25623.1.1.2.2021.2252   1.3.6.1.4.1.25623.1.1.4.2023.2783.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-36242 https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst https://github.com/pyca/cryptography/compare/3.3.1...3.3.2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/ https://github.com/pyca/cryptography/issues/5615 https://github.com/pyca/cryptography/issues/5615 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpujul2022.html