Amazon Linux 2023 Security Advisory: ALAS2023-2025-1051
Advisory Released Date: 2025-07-10
Advisory Updated Date: 2025-07-10
Severity:
Medium
Issue Overview:
lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for PyCrypto's ElGamal implementation. (CVE-2018-6594)
Affected Packages:
python-crypto
Issue Correction:
Run dnf update python-crypto --releasever 2023.7.20250623 to update your system.
New Packages:
aarch64:
python-crypto-debugsource-2.6.1-34.amzn2023.0.2.aarch64
python3-crypto-debuginfo-2.6.1-34.amzn2023.0.2.aarch64
python3-crypto-2.6.1-34.amzn2023.0.2.aarch64
src:
python-crypto-2.6.1-34.amzn2023.0.2.src
x86_64:
python-crypto-debugsource-2.6.1-34.amzn2023.0.2.x86_64
python3-crypto-debuginfo-2.6.1-34.amzn2023.0.2.x86_64
python3-crypto-2.6.1-34.amzn2023.0.2.x86_64