SUSE-SU-2024:0601-1: Security update for python-pycryptodome
This update for python-pycryptodome fixes the following issues: CVE-2023-52323: Fixed side-channel leakage in RSA decryption by using constant-time (faster) padding decoding for OAEP (bsc#1218564).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/python3-pycryptodome-debuginfoto a version that resolves this vulnerability.Fixed in 3.9.0-150200.9.1 - Upgrade
Upgrade
suse/python-pycryptodome-debuginfoto a version that resolves this vulnerability.Fixed in 3.9.0-150200.9.1 - Upgrade
Upgrade
suse/python3-pycryptodometo a version that resolves this vulnerability.Fixed in 3.9.0-150200.9.1 - Upgrade
Upgrade
suse/python-pycryptodome-debugsourceto a version that resolves this vulnerability.Fixed in 3.9.0-150200.9.1 - Upgrade
Upgrade
SUSE Basesystem Module 15-SP5to a version that resolves this vulnerability.Patch SUSE-SLE-Module-Basesystem-15-SP5-2024-601=1 - Upgrade
Upgrade
openSUSE Leap 15.5to a version that resolves this vulnerability.Patch openSUSE-SLE-15.5-2024-601=1
Event History
Frequently Asked Questions
Which systems are covered by this update?
The update applies to python-pycryptodome and python3-pycryptodome packages, including associated debuginfo and debugsource packages, on SUSE openSUSE Leap 15.5 and SUSE Basesystem Module 15-SP5 for aarch64, ppc64le, s390x, and x86_64.
What cryptographic operation is affected?
The issue affects RSA decryption using OAEP padding. The update changes OAEP padding decoding to a constant-time implementation to address side-channel leakage.
How can I determine whether a system needs the update?
Check whether the affected python-pycryptodome or python3-pycryptodome packages are installed on the listed SUSE platforms and whether the available security update SUSE-SU-2024:0601-1 has been applied.