Login
Newsletter
Werbung

Sicherheit: Zahlenüberläufe in python
Aktuelle Meldungen Distributionen
Name: Zahlenüberläufe in python
ID: MDVSA-2008:013
Distribution: Mandriva
Plattformen: Mandriva Corporate 4.0, Mandriva 2007.0, Mandriva 2007.1, Mandriva 2008.0
Datum: Di, 15. Januar 2008, 00:11
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4965
Applikationen: Python

Originalnachricht

This is a multi-part message in MIME format...

------------=_1200352230-4794-8560


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2008:013
http://www.mandriva.com/security/
_______________________________________________________________________

Package : python
Date : January 14, 2008
Affected: 2007.0, 2007.1, 2008.0, Corporate 4.0
_______________________________________________________________________

Problem Description:

Multiple integer overflows were found in python's imageop module.
If an application written in python used the imageop module to
process untrusted images, it could cause the application to crash,
enter an infinite loop, or possibly execute arbitrary code with the
privileges of the python interpreter.

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4965
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2007.0:
2aa2d395f88ba6a4d59c9768d838bbc9
2007.0/i586/libpython2.4-2.4.3-3.3mdv2007.0.i586.rpm
42e7a809d98b494c397b02536f563e3f
2007.0/i586/libpython2.4-devel-2.4.3-3.3mdv2007.0.i586.rpm
8047a106fcacb1a389fc62a4c0a1ffe1
2007.0/i586/python-2.4.3-3.3mdv2007.0.i586.rpm
5fc7ec936e59f3dbaf4195e68838c260
2007.0/i586/python-base-2.4.3-3.3mdv2007.0.i586.rpm
3f08259502861bfd057c9a675824eed1
2007.0/i586/python-docs-2.4.3-3.3mdv2007.0.i586.rpm
295ec06fd92677faa81958b3dc15673f
2007.0/i586/tkinter-2.4.3-3.3mdv2007.0.i586.rpm
3f4dcfcafa39b91533d2a6995d57900b
2007.0/SRPMS/python-2.4.3-3.3mdv2007.0.src.rpm

Mandriva Linux 2007.0/X86_64:
caaa07f3f09cfcea0bd1e8973799ffef
2007.0/x86_64/lib64python2.4-2.4.3-3.3mdv2007.0.x86_64.rpm
969e366d80532376e1eea4679b0ac0fb
2007.0/x86_64/lib64python2.4-devel-2.4.3-3.3mdv2007.0.x86_64.rpm
df60e3b77cc2e0653781fba0d2dd0b55
2007.0/x86_64/python-2.4.3-3.3mdv2007.0.x86_64.rpm
e23dadbd0a78fe5a3ed85d5cc1aec10b
2007.0/x86_64/python-base-2.4.3-3.3mdv2007.0.x86_64.rpm
19b0ae3d1ab4fe68ea3ffbe43c3b0942
2007.0/x86_64/python-docs-2.4.3-3.3mdv2007.0.x86_64.rpm
9daa7753a70117f94e478357824ee274
2007.0/x86_64/tkinter-2.4.3-3.3mdv2007.0.x86_64.rpm
3f4dcfcafa39b91533d2a6995d57900b
2007.0/SRPMS/python-2.4.3-3.3mdv2007.0.src.rpm

Mandriva Linux 2007.1:
83789918b32161771fc31de1c0276abc
2007.1/i586/libpython2.5-2.5-4.2mdv2007.1.i586.rpm
fb805a3c75630617183bddd8b1876317
2007.1/i586/libpython2.5-devel-2.5-4.2mdv2007.1.i586.rpm
e33c7874ed3d6d567f581c5698925ec8 2007.1/i586/python-2.5-4.2mdv2007.1.i586.rpm
0397f12fdddf81747abdee00035aa652
2007.1/i586/python-base-2.5-4.2mdv2007.1.i586.rpm
9afc73871e8e9aac908728f2895fad17
2007.1/i586/python-docs-2.5-4.2mdv2007.1.i586.rpm
36dbd270e4ce9d14a4cf00cb82218721
2007.1/i586/tkinter-2.5-4.2mdv2007.1.i586.rpm
e87524f2a4ba782fb8dc1616d52a5210 2007.1/SRPMS/python-2.5-4.2mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64:
a4e9f1cac6e2f4bb101ec44993787e8a
2007.1/x86_64/lib64python2.5-2.5-4.2mdv2007.1.x86_64.rpm
d36b5ee8b915aeb0aeacfb31c72b0d5b
2007.1/x86_64/lib64python2.5-devel-2.5-4.2mdv2007.1.x86_64.rpm
11c9d94ace60556d0742b7df15f26e20
2007.1/x86_64/python-2.5-4.2mdv2007.1.x86_64.rpm
5733c0d34ad9d474f09d72e081e8abb5
2007.1/x86_64/python-base-2.5-4.2mdv2007.1.x86_64.rpm
c111909ca5e251969157d0846aaddab5
2007.1/x86_64/python-docs-2.5-4.2mdv2007.1.x86_64.rpm
d0ebc98fb24040adada7f5a1cb0786da
2007.1/x86_64/tkinter-2.5-4.2mdv2007.1.x86_64.rpm
e87524f2a4ba782fb8dc1616d52a5210 2007.1/SRPMS/python-2.5-4.2mdv2007.1.src.rpm

Mandriva Linux 2008.0:
402de17d03c279d7473dc00bfb30fa29
2008.0/i586/libpython2.5-2.5.1-5.1mdv2008.0.i586.rpm
460006b33d6d8d221119e757d0e53997
2008.0/i586/libpython2.5-devel-2.5.1-5.1mdv2008.0.i586.rpm
006d53e8c4c5344f3333a5e88a8e5353
2008.0/i586/python-2.5.1-5.1mdv2008.0.i586.rpm
6f688cfe64f97febd7b4b1fde1444a4e
2008.0/i586/python-base-2.5.1-5.1mdv2008.0.i586.rpm
2cfbc489e172026680449de3549e4451
2008.0/i586/python-docs-2.5.1-5.1mdv2008.0.i586.rpm
55dbf574855f61c4cddcf24d86004fef
2008.0/i586/tkinter-2.5.1-5.1mdv2008.0.i586.rpm
b0a635daa3bd47a95ea97fa1e28869e4
2008.0/i586/tkinter-apps-2.5.1-5.1mdv2008.0.i586.rpm
aa344e978d53a329b717cae3ffaa6a38
2008.0/SRPMS/python-2.5.1-5.1mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64:
c759088550b15fe216d9d42d4f205ae3
2008.0/x86_64/lib64python2.5-2.5.1-5.1mdv2008.0.x86_64.rpm
c98822c30fff7d1b28f77db91c20e094
2008.0/x86_64/lib64python2.5-devel-2.5.1-5.1mdv2008.0.x86_64.rpm
786551ac171968deba675aac73bd25f9
2008.0/x86_64/python-2.5.1-5.1mdv2008.0.x86_64.rpm
ded534c04a11298591276b573cd84fac
2008.0/x86_64/python-base-2.5.1-5.1mdv2008.0.x86_64.rpm
7cdc40b041fab7c0462e7d01accd72e2
2008.0/x86_64/python-docs-2.5.1-5.1mdv2008.0.x86_64.rpm
70ce8cebd5a034e45da35152feb07c4d
2008.0/x86_64/tkinter-2.5.1-5.1mdv2008.0.x86_64.rpm
6bc778f57d71c0206a265e817644395a
2008.0/x86_64/tkinter-apps-2.5.1-5.1mdv2008.0.x86_64.rpm
aa344e978d53a329b717cae3ffaa6a38
2008.0/SRPMS/python-2.5.1-5.1mdv2008.0.src.rpm

Corporate 4.0:
38717e896327570dbbe5bf52099b45a4
corporate/4.0/i586/libpython2.4-2.4.1-5.3.20060mlcs4.i586.rpm
4584b1a54de62e416aa088d0f5c58aaf
corporate/4.0/i586/libpython2.4-devel-2.4.1-5.3.20060mlcs4.i586.rpm
c17ae6ab96b00477d4d43f9503dd5586
corporate/4.0/i586/python-2.4.1-5.3.20060mlcs4.i586.rpm
f6e5380393fbaab901856846f45cb872
corporate/4.0/i586/python-base-2.4.1-5.3.20060mlcs4.i586.rpm
2e153a8f3d28c7bcdf203429601dd5a3
corporate/4.0/i586/python-docs-2.4.1-5.3.20060mlcs4.i586.rpm
c09dbfa148bc49ff700c534e60456249
corporate/4.0/i586/tkinter-2.4.1-5.3.20060mlcs4.i586.rpm
ed33c06ab7a6c1235121330dfc7c14ea
corporate/4.0/SRPMS/python-2.4.1-5.3.20060mlcs4.src.rpm

Corporate 4.0/X86_64:
dc60e48b88c515fd370bef76434df88e
corporate/4.0/x86_64/lib64python2.4-2.4.1-5.3.20060mlcs4.x86_64.rpm
cd4810341e9e49cc2e607a4ae067fd78
corporate/4.0/x86_64/lib64python2.4-devel-2.4.1-5.3.20060mlcs4.x86_64.rpm
d71bbb307d68599831ff0c30d0968cc3
corporate/4.0/x86_64/python-2.4.1-5.3.20060mlcs4.x86_64.rpm
945f1355d6a357b0666512f1fd485f61
corporate/4.0/x86_64/python-base-2.4.1-5.3.20060mlcs4.x86_64.rpm
f905de87ed4a5d0dd0239d8896d39243
corporate/4.0/x86_64/python-docs-2.4.1-5.3.20060mlcs4.x86_64.rpm
cca9d202eb85b96a1c61c396e125637d
corporate/4.0/x86_64/tkinter-2.4.1-5.3.20060mlcs4.x86_64.rpm
ed33c06ab7a6c1235121330dfc7c14ea
corporate/4.0/SRPMS/python-2.4.1-5.3.20060mlcs4.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)

iD8DBQFHi79pmqjQ0CJFipgRAr21AKDvgsQaALmLRxyo52cXu0HQRFOY6gCfSZoU
0Phgk04W2rDdd6KGUy/BtDI=
=2oLn
-----END PGP SIGNATURE-----


------------=_1200352230-4794-8560
Content-Type: text/plain; name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________

------------=_1200352230-4794-8560--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung