Ubuntu Security Update USN-8452-1: pbkdf2 vulnerability

[LinuxBot]

Nikita Skovoroda discovered that pbkdf2 did not properly validate certain algorithm names. An attacker could possibly use this issue to generate predictable cryptographic keys, resulting in signature spoofing.

Continue reading...