linux/meta-openembedded.git/meta-python/recipes-devtools/python/python-pycrypto/CVE-2013-7459.patch, branch sumo Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=sumo 2017-08-28T09:06:04+00:00 python-pycrypto: Security fix CVE-2013-7459 2017-08-28T09:06:04+00:00 Yi Zhao yi.zhao@windriver.com 2017-08-24T05:56:32+00:00 urn:sha1:e4af9cf961c70bb4a96eaafd995d0ff2c264cb8e CVE-2013-7459: Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py. Reference: https://nvd.nist.gov/vuln/detail/CVE-2013-7459 Patch from: https://github.com/dlitz/pycrypto/commit/8dbe0dc3eea5c689d4f76b37b93fe216cf1f00d4 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>