{"id":"CVE-2020-25658","aliases":["DEBIAN-CVE-2020-25658","EUVD-2020-0167","GHSA-xrx6-fmxq-rjj2","MGASA-2021-0456","PYSEC-2020-100","RHSA-2020:5634","RHSA-2021:0637","RHSA-2022:1716","SUSE-SU-2022:3932-1","SUSE-SU-2023:0648-1","UBUNTU-CVE-2020-25658","openSUSE-SU-2024:11269-1","openSUSE-SU-2024:14163-1","openSUSE-SU-2026:12041-1"],"status":"published","title":"Timing attacks in python-rsa","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01651,"percentile":0.76695,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-327","CWE-385"],"published":"2020-11-12T13:48:31Z","modified":"2026-10-26T12:02:40Z","fixes":[{"ecosystem":"PyPI","package":"rsa","fixed_in":["4.7"],"sources":["ghsa","osv"]},{"ecosystem":"Mageia:8","package":"python-rsa","fixed_in":["4.7.2-1.mga8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python-rsa","fixed_in":["3.4.2-150000.3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-rsa","fixed_in":["3.4.2-150000.3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-rsa","fixed_in":["3.4.2-150000.3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"python-rsa","fixed_in":["3.4.2-150000.3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"python-rsa","fixed_in":["3.4.2-150000.3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-rsa","fixed_in":["3.4.2-150000.3.7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"python-rsa","fixed_in":["3.4.2-150000.3.7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-rsa","fixed_in":["3.4.2-150000.3.7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-rsa","fixed_in":["3.4.2-150000.3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-rsa","fixed_in":["3.1.4-12.19.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1"},{"fixed":"4.7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8-1","4.9-1","4.9-2","4.9-3","4.9-4"]},{"source":"osv","ecosystem":"Debian:13","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9-2","4.9-3","4.9-4"]},{"source":"osv","ecosystem":"Debian:14","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9-2","4.9-3","4.9-4"]},{"source":"osv","ecosystem":"PyPI","package":"rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1"},{"fixed":"4.7"}]}],"versions":["3.0","3.0.1","3.1","3.1.1","3.1.2","3.1.3","3.1.4","3.2","3.2.1","3.2.2","3.2.3","3.3","3.4","3.4.1","3.4.2","4.0","4.1","4.1.1","4.2","4.3","4.4","4.4.1","4.5","4.6"]},{"source":"osv","ecosystem":"Mageia:8","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-1.mga8"}]}]},{"source":"osv","ecosystem":"PyPI","package":"rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1"},{"fixed":"4.7"}]}],"versions":["3.0","3.0.1","3.1","3.1.1","3.1.2","3.1.3","3.1.4","3.2","3.2.1","3.2.2","3.2.3","3.3","3.4","3.4.1","3.4.2","4.0","4.1","4.1.1","4.2","4.3","4.4","4.4.1","4.5","4.6"]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202102060108.p0.git.97095.7271b90.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202102060108.p0.git.97095.7271b90.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202102060108.p0.git.97095.7271b90.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202102060108.p0.git.97095.7271b90.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"python3-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-2.rhaos4.7.git1d56dc8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-2.rhaos4.7.git1d56dc8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-2.rhaos4.7.git1d56dc8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-2.rhaos4.7.git1d56dc8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-2.rhaos4.7.git1d56dc8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-0.rhaos4.7.git8921e00.el7.51"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-0.rhaos4.7.git8921e00.el7.51"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-0.rhaos4.7.git8921e00.el8.51"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-0.rhaos4.7.git8921e00.el8.51"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-0.rhaos4.7.git8921e00.el8.51"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.263.3.1612433584-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.1612862361-1.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5-3.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"python2-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5-3.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8-1.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8-1.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.22-110.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.3.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.3.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.3.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-12.19.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2-1","3.1.2-1ubuntu0.1","3.1.2-1ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4-1","3.2.3-1","3.2.3-1.1","3.2.3-1.1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.2-1","3.4.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0-2","4.0-3","4.0-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0-4","4.7.2-1","4.8-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.5"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.1-1.4"}]}],"bundled":2}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"python-rsa_project","product":"python-rsa"},{"vendor":"redhat","product":"openstack_platform"},{"vendor":"sybren a. stüvel","product":"python-rsa"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25658","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://github.com/sybrenstuvel/python-rsa/issues/165","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","web","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SAF67KDGSOHLVFTRDOHNEAFDRSSYIWA/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QY4PJWTYSOV7ZEYZVMYIF6XRU73CY6O7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APF364QJ2IYLPDNVFBOEJ24QP2WLVLJP/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25658","tags":["advisory"]},{"url":"https://github.com/sybrenstuvel/python-rsa/commit/dae8ce0d85478e16f2368b2341632775313d41ed","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5634","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0637","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1716","tags":["web","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25658","tags":["web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889972","tags":["web","report"]},{"url":"https://github.com/advisories/GHSA-xrx6-fmxq-rjj2","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/rsa/PYSEC-2020-100.yaml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SAF67KDGSOHLVFTRDOHNEAFDRSSYIWA","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APF364QJ2IYLPDNVFBOEJ24QP2WLVLJP","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QY4PJWTYSOV7ZEYZVMYIF6XRU73CY6O7","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2SAF67KDGSOHLVFTRDOHNEAFDRSSYIWA","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APF364QJ2IYLPDNVFBOEJ24QP2WLVLJP","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QY4PJWTYSOV7ZEYZVMYIF6XRU73CY6O7","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-25658","tags":["advisory"]},{"url":"https://github.com/sybrenstuvel/python-rsa","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2021-0456.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29492","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2SAF67KDGSOHLVFTRDOHNEAFDRSSYIWA/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1910081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921650","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2020_5634.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8566","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8566","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8566","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95624","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15157","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15157","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15157","tags":["advisory"]},{"url":"https://github.com/containerd/containerd/releases/tag/v1.2.14","tags":["article"]},{"url":"https://github.com/containerd/containerd/security/advisories/GHSA-742w-89gc-8m9c","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2020/10/15/1","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25658","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3121","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1849003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1873346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929216","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0637.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-1945","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1945","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2304","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2145","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2305","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2115","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2306","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2104","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2307","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1646","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2308","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2102","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2309","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2103","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11979","tags":["advisory"]},{"url":"https://security.gentoo.org/glsa/202011-18","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925157","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21604","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21604","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21605","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925159","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21606","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21608","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21609","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21610","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21610","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21611","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1876860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1891557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1894038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1896803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1987041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2023379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2071137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2079016","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1716.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3524","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3524","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3524","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3979","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223932-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178676","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25658","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230648-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25658","tags":["report"]},{"url":"https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13757","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-25658","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.","status":"published","published":"2020-11-12T13:48:31Z","modified":"2024-08-04T15:40:36.903Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-385"],"updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2020-0167","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.","status":"published","published":"2020-11-12T13:48:31Z","modified":"2024-08-04T15:40:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T03:07:17.317062Z"}],"ghsa":[{"id":"GHSA-xrx6-fmxq-rjj2","title":"Timing attacks in python-rsa","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA","status":"published","published":"2021-04-30T17:35:15Z","modified":"2024-10-26T22:33:22Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-327","CWE-385"],"updated_at":"2026-11-02T14:38:13.90937Z"}],"nvd":[{"id":"CVE-2020-25658","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.","status":"published","published":"2020-11-12T14:15:22.877Z","modified":"2026-06-17T03:07:04.487Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-385","CWE-327"],"updated_at":"2026-11-02T14:06:24.137599Z"}],"osv":[{"id":"CVE-2020-25658","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.","status":"published","published":"2020-11-12T14:15:22.877Z","modified":"2026-10-20T10:54:18.917738139Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"DEBIAN-CVE-2020-25658","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.","status":"published","published":"2020-11-12T14:15:22.877Z","modified":"2026-10-26T12:02:40.347170055Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"GHSA-xrx6-fmxq-rjj2","title":"Timing attacks in python-rsa","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA","status":"published","published":"2021-04-30T17:35:15Z","modified":"2024-10-26T22:49:36.190678Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-327","CWE-385"],"updated_at":"2026-11-02T15:47:00.198893Z"},{"id":"RHSA-2020:5634","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.0 packages security update","status":"published","published":"2024-09-16T05:16:25Z","modified":"2026-10-13T10:02:02Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2021:0637","title":"Red Hat Security Advisory: OpenShift Container Platform 3.11.394 bug fix and security update","status":"published","published":"2024-09-16T05:24:26Z","modified":"2026-08-12T10:01:29Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2022:1716","title":"Red Hat Security Advisory: Red Hat Ceph Storage 4.3 Security and Bug Fix update","status":"published","published":"2024-09-16T06:05:46Z","modified":"2026-07-03T10:01:54Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"UBUNTU-CVE-2020-25658","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.","status":"published","published":"2020-11-12T14:15:00Z","modified":"2025-09-08T16:46:20Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"MGASA-2021-0456","title":"Updated python-rsa packages fix security vulnerability","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing\nattacks. An attacker can use this flaw via the RSA decryption API to\ndecrypt parts of the cipher text encrypted with RSA. (CVE-2020-25658)\n","status":"published","published":"2021-10-02T18:57:04Z","modified":"2026-04-16T04:41:08.817101253Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:11269-1","title":"python36-rsa-4.7.2-1.5 on GA media","description":"These are all security issues fixed in the python36-rsa-4.7.2-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:16:22.748236Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:14163-1","title":"python310-rsa-4.9-3.5 on GA media","description":"These are all security issues fixed in the python310-rsa-4.9-3.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-12T00:00:00Z","modified":"2026-02-04T02:18:43.135362Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2026:12041-1","title":"python313-rsa-4.9.1-1.4 on GA media","description":"These are all security issues fixed in the python313-rsa-4.9.1-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-04T00:00:00Z","modified":"2026-10-05T10:15:52.240891345Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"PYSEC-2020-100","description":"It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.","status":"published","published":"2020-11-12T14:15:00Z","modified":"2023-11-08T04:03:11.202381Z","updated_at":"2026-11-02T15:52:52.192131Z"},{"id":"SUSE-SU-2022:3932-1","title":"Security update for python-rsa","description":"This update for python-rsa fixes the following issues:\n\n  - CVE-2020-25658: Fixed bleichenbacher timing oracle attack against RSA decryption (bsc#1178676).\n","status":"published","published":"2022-11-10T10:55:38Z","modified":"2026-02-04T02:42:27.674969Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2023:0648-1","title":"Security update for python-rsa","description":"This update for python-rsa fixes the following issues:\n\n- CVE-2020-25658: Fixed a Bleichenbacher timing oracle attack against RSA decryption (bsc#1178676).\n","status":"published","published":"2023-03-07T14:17:46Z","modified":"2026-02-04T03:55:48.127612Z","updated_at":"2026-11-02T15:53:52.350754Z"}]}}