[Python-modules-team] Bug#722657: python-oauth2: CVE-2013-4347: Uses poor PRNG

Salvatore Bonaccorso carnil at debian.org
Fri Sep 13 05:01:48 UTC 2013


Package: python-oauth2
Version: 1.5.211-2
Severity: grave
Tags: security upstream

Hi,

the following vulnerability was published for python-oauth2.

CVE-2013-4347[0]:
Uses poor PRNG

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4347
    http://security-tracker.debian.org/tracker/CVE-2013-4347
[1] https://github.com/simplegeo/python-oauth2/issues/9

Regards,
Salvatore



More information about the Python-modules-team mailing list