Mandrake Security Advisory MDVSA-2009:050-1 (python-pycrypto)

  1. Network Vulnerabilities
  2. Mandrake Local Security Checks
  3. Mandrake Security Advisory MDVSA-2009:050-1 (python-pycrypto)
Summary
The remote host is missing an update to python-pycrypto announced via advisory MDVSA-2009:050-1.
Solution
To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2009:050-1
Insight
A vulnerability have been discovered and corrected in PyCrypto ARC2 module 2.0.1, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length (CVE-2009-0544). The updated packages have been patched to prevent this. Update: The previous update package was not signed. Affected: 2009.0
Severity
High Severity
Classification
Related Vulnerabilities