Описание
Security update for python-pycrypto
This update for python-pycrypto fixes the following issues:
- A heap buffer overflow in the AES module was fixed that could have lead to remote code execution, if the mode of operation can be specified from the outside (CVE-2013-7459, boo#1017420).
Список пакетов
openSUSE Leap 42.1
python-pycrypto-2.6.1-7.1
openSUSE Leap 42.2
python-pycrypto-2.6.1-7.1
Ссылки
- E-Mail link for openSUSE-SU-2017:0156-1
- SUSE Security Ratings
Описание
Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.
Затронутые продукты
openSUSE Leap 42.1:python-pycrypto-2.6.1-7.1
openSUSE Leap 42.2:python-pycrypto-2.6.1-7.1
Ссылки
- CVE-2013-7459
- SUSE Bug 1017420
- SUSE Bug 1047666
- SUSE Bug 1087140