CVE:CVE-2016-1494
CNNVD:CNNVD-201601-228
RSA package for Python（Python-RSA）是一个Python RSA实现，它支持加密和解密、签名和验证签名、密钥生成等。
Python-RSA 3.3之前版本中的‘verify’函数中存在安全漏洞。攻击者可借助特制的签名填充利用该漏洞使用较小的公共指数伪造签名。
solution:Upgrade python rsa to a higher version than 3.3,and avoid the version (,3.3); Upgrade fedoraproject fedora to a higher version than 22,23,and avoid the version 22,23; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2