mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-01-14 04:01:47 +00:00
CVE-2013-7459: Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py. Reference: https://nvd.nist.gov/vuln/detail/CVE-2013-7459 Patch from:8dbe0dc3eeSigned-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> (cherry picked from commite4af9cf961) Signed-off-by: Armin Kuster <akuster808@gmail.com>