Yi Zhao e4af9cf961 python-pycrypto: Security fix CVE-2013-7459 ...

CVE-2013-7459: Heap-based buffer overflow in the ALGnew function in
block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows
remote attackers to execute arbitrary code as demonstrated by a crafted
iv parameter to cryptmsg.py.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2013-7459

Patch from:
https://github.com/dlitz/pycrypto/commit/8dbe0dc3eea5c689d4f76b37b93fe216cf1f00d4

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>

2017-08-28 11:06:04 +02:00

3.9 KiB

Raw Blame History

View Raw