Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Fedora 22 M2Crypto Security Advisory: Buffer Overflow Issue Found

fedora
Calendar Grey November 19, 2015
Scroller Fedora
This patch addresses a memory corruption issue in libcrypto for Fedora 23, improving both safety and performance.
Fixes a buffer overflow in EVP.pbkdf2.

Summary

This package allows you to call OpenSSL functions from python scripts.

Update Information:

Fixes a buffer overflow in EVP.pbkdf2.

Topics%20covered

Topics Covered

security advisory fedora buffer overflow m2crypto python support

Change Log

References


[ 1 ] Bug #1271165 - m2crypto: pbkdf2 function crashes when given 74 byte result as argument https://bugzilla.redhat.com/show_bug.cgi?id=1271165

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update m2crypto' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: m2crypto
Product: Fedora 22
Version: 0.22.5
Release: 2.fc22
URL: https://gitlab.com/m2crypto/m2crypto/
Summary: Support for using OpenSSL in python scripts

Topics%20covered

Topics Covered

security advisory fedora buffer overflow m2crypto python support

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.