CVE-2019-11358 affecting package m2crypto for versions less than 0.38.0-4

CVE-2019-11358 affecting package m2crypto for versions less than 0.38.0-4. A patched version of the package is available...

CVE-2020-25657 affecting package m2crypto 0.35.2-8

CVE-2020-25657 affecting package m2crypto 0.35.2-8. No patch is available currently...

Fedora 22 : m2crypto-0.22.5-2.fc22 (2015-321ae39ee6)

Fixes a buffer overflow in EVP.pbkdf2. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Updated python-m2crypto packages fix security vulnerability

A bug was found in pbkdf2 function of m2crypto package, such that when given a 74 byte result, a buffer overflow occurs leading to crash of the application rhbz1271165...