Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 506
Alerts This Week
Warning Icon 1 506

Fedora 21 FEDORA-2015-446074b60f Moderate: M2Crypto Buffer Overflow

fedora
Calendar Grey November 20, 2015
Scroller Fedora
An update for m2crypto in Fedora resolves a significant buffer overflow vulnerability found in the EVP.pbkdf2 function, bolstering system security.
Fixes a buffer overflow in EVP.pbkdf2.

Summary

This package allows you to call OpenSSL functions from python scripts.

Update Information:

Fixes a buffer overflow in EVP.pbkdf2.

Topics%20covered

Topics Covered

security advisory critical issue buffer overflow software update Fedora m2crypto

Change Log

References


[ 1 ] Bug #1271165 - m2crypto: pbkdf2 function crashes when given 74 byte result as argument https://bugzilla.redhat.com/show_bug.cgi?id=1271165

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update m2crypto' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: m2crypto
Product: Fedora 21
Version: 0.22.5
Release: 2.fc21
URL: https://gitlab.com/m2crypto/m2crypto/
Summary: Support for using OpenSSL in python scripts

Topics%20covered

Topics Covered

security advisory critical issue buffer overflow software update Fedora m2crypto

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.