Huawei EulerOS: Security Advisory for python-rsa (EulerOS-SA-2020-1980)

The remote host is missing an update for the Huawei EulerOS 'python-rsa' package(s) announced via the EulerOS-SA-2020-1980 advisory.

A flaw was found in the python-rsa package, where it does not explicitly check the ciphertext length against the key size and ignores the leading 0 bytes during the decryption of the ciphertext. This flaw allows an attacker to perform a ciphertext attack, leading to a denial of service. The highest threat from this vulnerability is to confidentiality.(CVE-2020-13757)

'python-rsa' package(s) on Huawei EulerOS Virtualization for ARM 64 3.0.2.0.

Checks if a vulnerable package version is present on the target host.

Please install the updated package(s).