ALAS-2017-801


Amazon Linux AMI Security Advisory: ALAS-2017-801
Advisory Release Date: 2017-03-06 14:00 Pacific
Severity: Important
References: CVE-2013-7459 

Issue Overview:

A heap-buffer overflow vulnerability was discovered in cryptopp. This vulnerability can be used to remotely gain access to shell.


Affected Packages:

python-crypto


Issue Correction:
Run yum update python26-crypto and/or yum update python27-crypto to update your system.

New Packages:
i686:
    python26-crypto-2.6.1-1.14.amzn1.i686
    python-crypto-debuginfo-2.6.1-1.14.amzn1.i686
    python27-crypto-2.6.1-1.14.amzn1.i686

src:
    python-crypto-2.6.1-1.14.amzn1.src

x86_64:
    python26-crypto-2.6.1-1.14.amzn1.x86_64
    python27-crypto-2.6.1-1.14.amzn1.x86_64
    python-crypto-debuginfo-2.6.1-1.14.amzn1.x86_64