Medium: python-rsa

2016-02-09T13:30:00
ID ALAS-2016-644
Type amazon
Reporter Amazon
Modified 2016-02-09T13:30:00

Description

Issue Overview:

It was found that python-rsa is vulnerable to Bleichenbacher'06 attack, allowing attacker to fake signatures for any public key with low exponent. (CVE-2016-1494 __)

Affected Packages:

python-rsa

Issue Correction:
Run yum update python-rsa to update your system.

New Packages:

noarch:  
    python26-rsa-3.3-2.7.amzn1.noarch  
    python27-rsa-3.3-2.7.amzn1.noarch

src:  
    python-rsa-3.3-2.7.amzn1.src