python3Packages.pycrypto
pycrypto 3.23.0 · pkgs/development/python-modules/pycrypto/default.nix
Health
Risk
risk 67 critical
- +60 2 open advisories
- +6 no maintainer
- +1 no meta.license
Version
3.23.0 no newer release known to repology
Channels
Hydra
succeeded 10y ago
Advisories
PYSEC-2017-94 critical 9.8 Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py. (OSV, for this version)
CVE-2013-7459
PYSEC-2018-97 high 7.5 lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assum (OSV, for this version)
CVE-2018-6594
Packaging
no meta.license
Packagewhat each field means
Description
Drop-in replacement for pycrypto using pycryptodome
Homepage
License
none
Platforms
31 platforms: Linux, Darwin
Source provenance
not set: built from source
Outputs
out distStatus
not broken, not insecure, free
Maintainers
none
Version bumps 0all open bumps
None open.
Pull requests 0
None open.
Issues 0
None open.