Advisories » MGASA-2015-0458

Updated python-m2crypto packages fix security vulnerability

Publication date: 26 Nov 2015
Modification date: 26 Nov 2015
Type: security
Affected Mageia releases : 5

Description

A bug was found in pbkdf2 function of m2crypto package, such that when
given a 74 byte result, a buffer overflow occurs leading to crash of the
application (rhbz#1271165).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=17179
• https://lists.fedoraproject.org/pipermail/package-announce/2015-November/172083.html

SRPMS

5/core

• python-m2crypto-0.22.5-1.mga5