python-cryptography: bad key generation
| Package(s): | python-cryptography | CVE #(s): | CVE-2016-9243 | ||||||||||||||||||||
| Created: | November 14, 2016 | Updated: | November 29, 2016 | ||||||||||||||||||||
| Description: | From the Mageia advisory:
Fixed a bug where HKDF would return an empty byte-string if used with a length less than algorithm.digest_size. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||