drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Verwendung schwacher Verschlüsselung in Python (Aktualisierung)
Name: |
Verwendung schwacher Verschlüsselung in Python (Aktualisierung) |
|
ID: |
USN-3616-2 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 12.04 ESM |
|
Datum: |
Mo, 9. April 2018, 21:23 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6594 |
|
Applikationen: |
Python |
|
Update von: |
Verwendung schwacher Verschlüsselung in Python |
|
Originalnachricht |
--===============5738611902396555635== Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="=-YosOjeWtmJOsw/izEB3x"
--=-YosOjeWtmJOsw/izEB3x Content-Type: text/plain; charset="UTF-8 Content-Transfer-Encoding: quoted-printable
========================================================================== Ubuntu Security Notice USN-3616-2 April 09, 2018
python-crypto vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 ESM
Summary:
Python Crypto could expose sensitive information.
Software Description: - python-crypto: cryptographic algorithms and protocols for Python
Details:
USN-3616-1 fixed a vulnerability in Python Crypto. This update provides the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
It was discovered that Python Crypto incorrectly generated ElGamal key parameters. A remote attacker could possibly use this issue to obtain sensitive information.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 12.04 ESM: python-crypto 2.4.1-1ubuntu0.3 python3-crypto 2.4.1-1ubuntu0.3
In general, a standard system update will make all the necessary changes.
References: https://usn.ubuntu.com/usn/usn-3616-2 https://usn.ubuntu.com/usn/usn-3616-1 CVE-2018-6594 --=-YosOjeWtmJOsw/izEB3x Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2
iQIcBAABCAAGBQJay2MFAAoJEEW851uECx9pdC4QAKikRE3MzadDT7u1oOy2HwSe 5Wpksr26dlSM9HcAKjx7YMIUmhthq+x1JHmoB9IMgTxqRapgnyqVu2YG+OIeKBUT 8OHZLHt14E5W9FXy3JW/gYOYgbplfZuPmnywA0sP89ow0TjwzxkW0MVuqJnqPfbK y6Z4qtr+hJ5xm9Qk3JntrWTwUyPA8BIhpnkZZD8ljr+PtuE+KGWi7TscTptr3x4X U4iLyO1P4MoAk7DgbCWlq0GlkU2hQ0A2rA4u1g8YDS3vjrwPYQiDkgZjeQSnl6fR wo4t5fswrNLOl3I5U71phMKOySzMAT40LgVc9Kh//VQnCx6Aug7n10OKJpVEKvn+ 9nXLRVoKAcDXlH0cJFZ2ULfaqK8WnwtMqEqCOUBRAvlbpm6bSpfE4JGcanAeDYnd aPmpRe0WTnVf9z1Z0pPobOeRql+LnMk8l40DsHIaJoXEpJsn5QD9+ueKAlKI2b0S GOT9F38lKQzZXFtRCggZwvNbyQHQOySfN8I0VBHxsZ7QMKDS9Q8t8oarpmZR2k9z OZUlrMCONl1P5Fal4NGsxxAgj4v5yvld1o7ON6uCBymWCIm9RZWcQ/DHY47K4G9m X+O2KyXLUtW+jWMAzsnTvVzqh69opTd9HUAxLqJjObLPncU4KjvwLA8dMj27pTxO x31y3+KRTaLKsk1g4B0u =xX2f -----END PGP SIGNATURE-----
--=-YosOjeWtmJOsw/izEB3x--
--===============5738611902396555635== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline
LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5 LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj dXJpdHktYW5ub3VuY2UK
--===============5738611902396555635==--
|
|
|
|