It was found that python-rsa is vulnerable to Bleichenbacher'06 attack, allowing attacker to fake signatures for any public key with low exponent. Upstream patch: https://bitbucket.org/sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff CVE assignment: http://seclists.org/oss-sec/2016/q1/18 External reference: https://blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/
Created python-rsa tracking bugs for this issue: Affects: fedora-all [bug 1295870] Affects: epel-all [bug 1295871]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.