Fedora 27: 2018:913c225b49 Critical: python-crypto ElGamal Flaw

PyCrypto is a collection of both secure hash functions (such as MD5 and

SHA), and various encryption algorithms (AES, DES, RSA, ElGamal, etc.).

The textbook ElGamal implementation is not secure. PyCrypto and some other

implementations use the wrong algorithm, which may lead to some information

disclosure simply by looking at the encrypted text. For a full description, see

https://github.com/pycrypto/pycrypto/issues/253 This update includes a fix for

this problem backported from pycryptodome.

[ 1 ] Bug #1542313 - CVE-2018-6594 python-crypto: Weak ElGamal key parameters in PublicKey/ElGamal.py allow attackers to obtain sensitive information by reading ciphertext

https://bugzilla.redhat.com/show_bug.cgi?id=1542313

su -c 'dnf upgrade python-crypto' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org