Login
Login-Name Passwort


 
Newsletter
Werbung

Sicherheit: Mehrere Probleme in python3
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in python3
ID: MDVSA-2015:076
Distribution: Mandriva
Plattformen: Mandriva Business Server 2.0
Datum: Sa, 28. März 2015, 10:57
Referenzen: http://advisories.mageia.org/MGASA-2014-0085.html
http://advisories.mageia.org/MGASA-2014-0140.html
http://advisories.mageia.org/MGASA-2014-0216.html
http://advisories.mageia.org/MGASA-2014-0285.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7338
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1912
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2667
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4616
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4650

Originalnachricht

This is a multi-part message in MIME format...

------------=_1427479768-21314-14

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2015:076
http://www.mandriva.com/en/support/security/
_______________________________________________________________________

Package : python3
Date : March 27, 2015
Affected: Business Server 2.0
_______________________________________________________________________

Problem Description:

Updated python3 packages fix security vulnerabilities:

ZipExtFile.read goes into 100% CPU infinite loop on maliciously binary
edited zips (CVE-2013-7338).

A vulnerability was reported in Python's socket module, due to
a boundary error within the sock_recvfrom_into() function, which
could be exploited to cause a buffer overflow. This could be used
to crash a Python application that uses the socket.recvfrom_info()
function or, possibly, execute arbitrary code with the permissions
of the user running vulnerable Python code (CVE-2014-1912).

It was reported that a patch added to Python 3.2 caused a race
condition where a file created could be created with world read/write
permissions instead of the permissions dictated by the original umask
of the process. This could allow a local attacker that could win the
race to view and edit files created by a program using this call. Note
that prior versions of Python, including 2.x, do not include the
vulnerable _get_masked_mode() function that is used by os.makedirs()
when exist_ok is set to True (CVE-2014-2667).

Python are susceptible to arbitrary process memory reading by a user
or adversary due to a bug in the _json module caused by insufficient
bounds checking. The bug is caused by allowing the user to supply a
negative value that is used an an array index, causing the scanstring
function to access process memory outside of the string it is intended
to access (CVE-2014-4616).

The CGIHTTPServer Python module does not properly handle URL-encoded
path separators in URLs. This may enable attackers to disclose a CGI
script's source code or execute arbitrary scripts in the
server's
document root (CVE-2014-4650).
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7338
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1912
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2667
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4616
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4650
http://advisories.mageia.org/MGASA-2014-0085.html
http://advisories.mageia.org/MGASA-2014-0140.html
http://advisories.mageia.org/MGASA-2014-0216.html
http://advisories.mageia.org/MGASA-2014-0285.html
_______________________________________________________________________

Updated Packages:

Mandriva Business Server 2/X86_64:
56f95c3e025bb7111ee5c54dfa85f383
mbs2/x86_64/lib64python3.3-3.3.2-14.1.mbs2.x86_64.rpm
cff088862bad2bccba25080f5123c308
mbs2/x86_64/lib64python3-devel-3.3.2-14.1.mbs2.x86_64.rpm
bee9faadbee55220b5be84138d183943
mbs2/x86_64/python3-3.3.2-14.1.mbs2.x86_64.rpm
763832c9969a3b6b6f7d4afefe3d8abd
mbs2/x86_64/python3-docs-3.3.2-14.1.mbs2.noarch.rpm
c25f48cc46129556b7618bebe4b0d1f0
mbs2/x86_64/tkinter3-3.3.2-14.1.mbs2.x86_64.rpm
482e45791ec634dda30134cd5513fccc
mbs2/x86_64/tkinter3-apps-3.3.2-14.1.mbs2.x86_64.rpm
08451430f2a306c8f64ba1e6828a93dd mbs2/SRPMS/python3-3.3.2-14.1.mbs2.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFVFY5lmqjQ0CJFipgRAtcGAKDPo0tffXqgxDunkoEz0ZzVnKVA/gCfdO06
rhBP84L6S2hc3D7h/cvqeyE=
=nvR4
-----END PGP SIGNATURE-----


------------=_1427479768-21314-14
Content-Type: text/plain; charset="UTF-8";
name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://store.mandriva.com
_______________________________________________________


------------=_1427479768-21314-14--
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung