Stay Secure with the Latest Linux Advisories

security advisoryfedorabuffer overflow

Fedora 22 M2Crypto Security Advisory: Buffer Overflow Issue Found

Fixes a buffer overflow in EVP.pbkdf2.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-321ae39ee6 2015-11-19 07:46:18.561202 -------------------------------------------------------------------------------- Name : m2crypto Product : Fedora 22 Version : 0.22.5 Release : 2.fc22 URL : https://gitlab.com/m2crypto/m2crypto/ Summary : Support for using OpenSSL in python scripts Description : This package allows you to call OpenSSL functions from python scripts. -------------------------------------------------------------------------------- Update Information: Fixes a buffer overflow in EVP.pbkdf2. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1271165 - m2crypto: pbkdf2 function crashes when given 74 byte result as argument https://bugzilla.redhat.com/show_bug.cgi?id=1271165 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update m2crypto' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . This patch addresses a memory corruption issue in libcrypto for Fedora 23, improving both safety and performance.. m2crypto security update, fedora package security, openssl python integration. . Severity: Important. LinuxSecurity.com Team

Nov 19, 2015 •Important Fedora