==========================================================================
Ubuntu Security Notice USN-3616-1
April 03, 2018
python-crypto vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 17.10
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS
Summary:
Python Crypto could expose sensitive information.
Software Description:
– python-crypto: cryptographic algorithms and protocols for Python
Details:
It was discovered that Python Crypto incorrectly generated ElGamal key
parameters. A remote attacker could possibly use this issue to obtain
sensitive information.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 17.10:
python-crypto 2.6.1-7ubuntu0.1
python3-crypto 2.6.1-7ubuntu0.1
Ubuntu 16.04 LTS:
python-crypto 2.6.1-6ubuntu0.16.04.3
python3-crypto 2.6.1-6ubuntu0.16.04.3
Ubuntu 14.04 LTS:
python-crypto 2.6.1-4ubuntu0.3
python3-crypto 2.6.1-4ubuntu0.3
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/usn/usn-3616-1
CVE-2018-6594
Package Information:
https://launchpad.net/ubuntu/+source/python-crypto/2.6.1-7ubuntu0.1
https://launchpad.net/ubuntu/+source/python-crypto/2.6.1-6ubuntu0.16.04.3
https://launchpad.net/ubuntu/+source/python-crypto/2.6.1-4ubuntu0.3
—–BEGIN PGP SIGNATURE—–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=Jse/
—–END PGP SIGNATURE—–
—
