Описание
Security update for python-pycrypto
This update for python-pycrypto fixes the following issues:
- CVE-2013-7459: Fixed a potential heap buffer overflow in ALGnew (bsc#1017420).
Список пакетов
SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLS
python-pycrypto-2.6.1-5.1
SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS
python-pycrypto-2.6.1-5.1
Ссылки
- Link for SUSE-SU-2017:1744-1
- E-Mail link for SUSE-SU-2017:1744-1
- SUSE Security Ratings
- SUSE Bug 1017420
- SUSE CVE CVE-2013-7459 page
Описание
Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.
Затронутые продукты
SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLS:python-pycrypto-2.6.1-5.1
SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLS:python-pycrypto-2.6.1-5.1
Ссылки
- CVE-2013-7459
- SUSE Bug 1017420
- SUSE Bug 1047666
- SUSE Bug 1087140