Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

python-keyring: weak cryptography

Package(s):

python-keyring

CVE #(s):

CVE-2012-4571

Created:

November 21, 2012

Updated:

November 21, 2012

Description:

From the Ubuntu advisory:

Dwayne Litzenberger discovered that Python Keyring's CryptedFileKeyring file format used weak cryptography. A local attacker may use this issue to brute-force CryptedFileKeyring keyring files.

Alerts:

Ubuntu

USN-1634-1

2012-11-20

(Log in to post comments)