Updated python-pycrypto packages fix security vulnerability
Publication date: 19 Mar 2018Modification date: 19 Mar 2018
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2018-6594
Description
The textbook ElGamal implementation is not secure. PyCrypto and some other implementations use the wrong algorithm, which may lead to some information disclosure simply by looking at the encrypted text. For a full description, see https://github.com/dlitz/pycrypto/issues/253 This update includes a fix for this problem backported from pycryptodome.
References
SRPMS
6/core
- python-pycrypto-2.6.1-9.1.mga6
5/core
- python-pycrypto-2.6.1-6.2.mga5