Amazon Linux 1 (EOL) Security Advisory: ALAS-2016-644
Advisory Released Date: 2016-02-09
Advisory Updated Date: 2016-02-09
Severity:
Medium
Issue Overview:
It was found that python-rsa is vulnerable to Bleichenbacher'06 attack, allowing attacker to fake signatures for any public key with low exponent. (CVE-2016-1494)
Affected Packages:
python-rsa
Issue Correction:
Run yum update python-rsa to update your system.
New Packages:
noarch:
python26-rsa-3.3-2.7.amzn1.noarch
python27-rsa-3.3-2.7.amzn1.noarch
src:
python-rsa-3.3-2.7.amzn1.src