age: pyrage is a set of Python bindings for the rage file encryption library (age in Rust)
CVE-2024-56327 is fixed in 2 products on 1 platform, first by age 1.1.1-1ubuntu0.24.04.3+esm1, released December 19, 2024. It is not reported as exploited. Patch Radar priority: Routine.
pyrage is a set of Python bindings for the rage file encryption library (age in Rust). `pyrage` uses the Rust `age` crate for its underlying operations, and `age` is vulnerable to GHSA-4fg7-vxc8-qx5w. All details of GHSA-4fg7-vxc8-qx5w are relevant to `pyrage` for the versions specified in this advisory. See GHSA-4fg7-vxc8-qx5w for full details. Versions of `pyrage` before 1.2.0 lack plugin support and are therefore **not affected**. An equivalent issue was fixed in [the reference Go implementation of age](https://github.com/FiloSottile/age), see advisory GHSA-32gq-x56h-299c. This issue has been addressed in version 1.2.3 and all users are advised to update. There are no known workarounds for this vulnerability.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| age · Ubuntu 24.04.5 LTS (noble) | 1.1.1-1ubuntu0.24.04.3+esm1 | age 1.1.1-1ubuntu0.24.04.3+esm1 | Dec 19, 2024 |
| golang-filippo-age-dev · Ubuntu 24.04.5 LTS (noble) | 1.1.1-1ubuntu0.24.04.3+esm1 | golang-filippo-age-dev 1.1.1-1ubuntu0.24.04.3+esm1 | Dec 19, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.