Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 547
Alerts This Week
Warning Icon 1 547

SUSE: 2017:2350-1 Important: Heap Overflow in Python-Pycrypto

suse
Calendar Grey September 5, 2017
Dist Suse Esm H88
Debian Security Advisory highlights a critical vulnerability in libxml2 with necessary instructions for mitigation.
An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is ...

Summary

This update for python-pycrypto fixes the following issues: - CVE-2013-7459: Fixed a potential heap buffer overflow in ALGnew (bsc#1017420). python-paramiko was adjusted to work together with this python-pycrypto change. (bsc#1047666) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2017-1457=1 - SUSE OpenStack Cloud 6: zypper in -t patch SUSE-OpenStack-Cloud-6-2017-1457=1 - SUSE Manager Tools 12: zypper in -t patch SUSE-SLE-Manager-Tools-12-2017-1457=1 - SUSE Manager Server 3.1: zypper in -t patch SUSE-SUSE-Manager-Server-3.1-2017-1457=1 - SUSE Manager Server 3.0: zypper in -t patch SUSE-SUSE-Manager-Server-3.0-2017-1457=1

Topics%20covered

Topics Covered

security advisory important heap overflow python-pycrypto suse openstack

References

#1017420 #1047666

Cross- CVE-2013-7459

Affected Products:

SUSE OpenStack Cloud 7

SUSE OpenStack Cloud 6

SUSE Manager Tools 12

SUSE Manager Server 3.1

SUSE Manager Server 3.0

SUSE Manager Proxy 3.1

SUSE Manager Proxy 3.0

SUSE Linux Enterprise Point of Sale 12-SP2

SUSE Linux Enterprise Module for Web Scripting 12

SUSE Linux Enterprise Module for Public Cloud 12

SUSE Linux Enterprise Module for Advanced Systems Management 12

SUSE Enterprise Storage 4

SUSE Enterprise Storage 3

SUSE Container as a Service Platform ALL

OpenStack Cloud Magnum Orchestration 7

https://www.suse.com/security/cve/CVE-2013-7459.html

https://bugzilla.suse.com/1017420

https://bugzilla.suse.com/1047666

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2350-1
Rating: important

Topics%20covered

Topics Covered

security advisory important heap overflow python-pycrypto suse openstack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.