LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

LWN.net Weekly Edition for May 23, 2013

An "enum" for Python 3

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

Printable page
Weekly edition Kernel Security Distributions Contact Us Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ Sponsors

python-crypto: insecure key generation

Package(s):python-crypto CVE #(s):CVE-2012-2417
Created:June 4, 2012 Updated:April 10, 2013
Description: From the Red Hat bugzilla:

A security flaw was found in the implementation of ElGamal algorithm of python-crypto, a cryptography library for Python language, in the way how random number 'g' was generated.

Alerts:
Fedora FEDORA-2012-8392 2012-06-03
Fedora FEDORA-2012-8470 2012-06-03
Fedora FEDORA-2012-8490 2012-06-03
Debian DSA-2502-1 2012-06-24
Gentoo 201206-23 2012-06-24
Ubuntu USN-1484-1 2012-06-28
openSUSE openSUSE-SU-2012:0830-1 2012-07-04
Mandriva MDVSA-2012:117 2012-07-27
Mageia MGASA-2012-0194 2012-08-02
Mandriva MDVSA-2013:120 2013-04-10
(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds