Nom du paquet
python
Date
2009-08-23
Advisory ID
MDVSA-2009:212
Affected versions
2009.0 x86_64 , CS4.0 x86_64 , MNF2.0 i586 , 2009.1 i586 , 2009.0 i586 , 2008.1 i586 , CS3.0 x86_64 , CS4.0 i586 , CS3.0 i586 , MES5 i586 , 2008.1 x86_64 , 2009.1 x86_64 , MES5 x86_64

Problem description

A vulnerability was found in xmltok_impl.c (expat) that with
specially crafted XML could be exploited and lead to a denial of
service attack. Related to CVE-2009-2625 (CVE-2009-3720).

This update fixes this vulnerability.

Updated packages

2009.0 x86_64

 cef3bdd63b557ac45c7fc1caeb7f93fb  2009.0/x86_64/lib64python2.5-2.5.2-5.3mdv2009.0.x86_64.rpm
 494082f968c548878504954486de0472  2009.0/x86_64/lib64python2.5-devel-2.5.2-5.3mdv2009.0.x86_64.rpm
 53066eba413c19255bff2f96d09fd71b  2009.0/x86_64/python-2.5.2-5.3mdv2009.0.x86_64.rpm
 4882e3b56af0ccff57d323b0e81a0c86  2009.0/x86_64/python-base-2.5.2-5.3mdv2009.0.x86_64.rpm
 9589abe6325301c18e630da640696925  2009.0/x86_64/python-docs-2.5.2-5.3mdv2009.0.x86_64.rpm
 8a34b93f61e1aedd03bd42e80936e702  2009.0/x86_64/tkinter-2.5.2-5.3mdv2009.0.x86_64.rpm
 aa5f5b193674a3566d599c48dd3bf198  2009.0/x86_64/tkinter-apps-2.5.2-5.3mdv2009.0.x86_64.rpm 
 838505a65e7170253df7dd2c6bb2ce29  2009.0/SRPMS/python-2.5.2-5.3mdv2009.0.src.rpm

CS4.0 x86_64

 0679e00d989009ec50021d94fc17e94b  corporate/4.0/x86_64/lib64python2.4-2.4.5-0.3.20060mlcs4.x86_64.rpm
 e31a1bc0d0d54e4cff074e168a18bc12  corporate/4.0/x86_64/lib64python2.4-devel-2.4.5-0.3.20060mlcs4.x86_64.rpm
 8bcdde1f348a729b287bc0046503b3ee  corporate/4.0/x86_64/python-2.4.5-0.3.20060mlcs4.x86_64.rpm
 5ba366f0cfd05b6c237fd54eafc36eb2  corporate/4.0/x86_64/python-base-2.4.5-0.3.20060mlcs4.x86_64.rpm
 d2d906256924badff5042c8e37234130  corporate/4.0/x86_64/python-docs-2.4.5-0.3.20060mlcs4.x86_64.rpm
 46b8d19e7b9538afb024e759de6c4dbb  corporate/4.0/x86_64/tkinter-2.4.5-0.3.20060mlcs4.x86_64.rpm 
 86b2985d74be8c13e30372425bb3e549  corporate/4.0/SRPMS/python-2.4.5-0.3.20060mlcs4.src.rpm

MNF2.0 i586

 1452617c693de8d4e955a0c5f743ce67  mnf/2.0/i586/libpython2.3-2.3.7-0.3.C30mdk.i586.rpm
 07302c967d11fde4ffdbb6ff81b05b7c  mnf/2.0/i586/libpython2.3-devel-2.3.7-0.3.C30mdk.i586.rpm
 e5f65d271eb9e5793f57c407e2975e6c  mnf/2.0/i586/python-2.3.7-0.3.C30mdk.i586.rpm
 290432b9d3868acde4e90fa3fe4288f5  mnf/2.0/i586/python-base-2.3.7-0.3.C30mdk.i586.rpm
 2d9797eda3b0eca2e6b92d28851fdc8f  mnf/2.0/i586/python-docs-2.3.7-0.3.C30mdk.i586.rpm
 690e1ebed6b23eb195dc2804249108dd  mnf/2.0/i586/tkinter-2.3.7-0.3.C30mdk.i586.rpm 
 30bc1960b03bb97e3494a3466d878371  mnf/2.0/SRPMS/python-2.3.7-0.3.C30mdk.src.rpm

2009.1 i586

 698f1c4fe930e04180f90066303f208c  2009.1/i586/libpython2.6-2.6.1-6.1mdv2009.1.i586.rpm
 95f44487a6858e974cf7a69e81c4da30  2009.1/i586/libpython2.6-devel-2.6.1-6.1mdv2009.1.i586.rpm
 f274ff8d9c684f958c792060c7d40377  2009.1/i586/python-2.6.1-6.1mdv2009.1.i586.rpm
 80699827f57799ce3aa889cc96f1e370  2009.1/i586/python-docs-2.6.1-6.1mdv2009.1.i586.rpm
 5377a66c3d6bb6cec81be0e75ca71f77  2009.1/i586/tkinter-2.6.1-6.1mdv2009.1.i586.rpm
 be48b1e249242a193a41fb6e1920b1dc  2009.1/i586/tkinter-apps-2.6.1-6.1mdv2009.1.i586.rpm 
 6b7c29642be5f8aa998fc4bd5f571f9e  2009.1/SRPMS/python-2.6.1-6.1mdv2009.1.src.rpm

2009.0 i586

 41a6ff3352ec97287c6ab70e3bb8d2d7  2009.0/i586/libpython2.5-2.5.2-5.3mdv2009.0.i586.rpm
 98a906e1203d5b5ca68c45880ed50792  2009.0/i586/libpython2.5-devel-2.5.2-5.3mdv2009.0.i586.rpm
 79c828581618bd5595357ee6ff11eb46  2009.0/i586/python-2.5.2-5.3mdv2009.0.i586.rpm
 ecec77d205b6cb0b573f480cf2ecf416  2009.0/i586/python-base-2.5.2-5.3mdv2009.0.i586.rpm
 d7e0cba3770581d0ac3a553c85587f74  2009.0/i586/python-docs-2.5.2-5.3mdv2009.0.i586.rpm
 39a114e0cffa3e7606cee245c3daa83a  2009.0/i586/tkinter-2.5.2-5.3mdv2009.0.i586.rpm
 cb9c6dccfda79b7928535f9530554145  2009.0/i586/tkinter-apps-2.5.2-5.3mdv2009.0.i586.rpm 
 838505a65e7170253df7dd2c6bb2ce29  2009.0/SRPMS/python-2.5.2-5.3mdv2009.0.src.rpm

2008.1 i586

 836ae8dca4ea5075570308601404f08b  2008.1/i586/libpython2.5-2.5.2-2.4mdv2008.1.i586.rpm
 c0d2f284c5186fbeffbec54c87c3b16e  2008.1/i586/libpython2.5-devel-2.5.2-2.4mdv2008.1.i586.rpm
 9dc6194d0725d98de504d43a6a6be8ee  2008.1/i586/python-2.5.2-2.4mdv2008.1.i586.rpm
 ff9365c549641ceb5220b95ed839c5a1  2008.1/i586/python-base-2.5.2-2.4mdv2008.1.i586.rpm
 eaa3f8eb68cb602d4844e49e243ca9cf  2008.1/i586/python-docs-2.5.2-2.4mdv2008.1.i586.rpm
 3111537c56613f5597c57a524ed1636b  2008.1/i586/tkinter-2.5.2-2.4mdv2008.1.i586.rpm
 c1ada1cf0e66f5108f43c72fb9955f72  2008.1/i586/tkinter-apps-2.5.2-2.4mdv2008.1.i586.rpm 
 7c3531beccdeba86834ab34353b0b63a  2008.1/SRPMS/python-2.5.2-2.4mdv2008.1.src.rpm

CS3.0 x86_64

 3cef00123723431a9b732de0d8f78d1d  corporate/3.0/x86_64/lib64python2.3-2.3.7-0.3.C30mdk.x86_64.rpm
 c8ae565114282532d176fdd6bbb57314  corporate/3.0/x86_64/lib64python2.3-devel-2.3.7-0.3.C30mdk.x86_64.rpm
 9eef4396d6cf03ca83c1d5b7f7c9eeb3  corporate/3.0/x86_64/python-2.3.7-0.3.C30mdk.x86_64.rpm
 ad4d0d1cced20b7fd37392f45f14500c  corporate/3.0/x86_64/python-base-2.3.7-0.3.C30mdk.x86_64.rpm
 6e62cd462a994074536e8aeb553696e2  corporate/3.0/x86_64/python-docs-2.3.7-0.3.C30mdk.x86_64.rpm
 9861e393e4e17b014f7be8d6fac63a22  corporate/3.0/x86_64/tkinter-2.3.7-0.3.C30mdk.x86_64.rpm 
 2e721dd00daf3f183b0b2f08fda11d22  corporate/3.0/SRPMS/python-2.3.7-0.3.C30mdk.src.rpm

CS4.0 i586

 15bd9c5d9affc50459c8cd7f7ec1ee93  corporate/4.0/i586/libpython2.4-2.4.5-0.3.20060mlcs4.i586.rpm
 0faa2120be98b8f31fd10d2a7175c91e  corporate/4.0/i586/libpython2.4-devel-2.4.5-0.3.20060mlcs4.i586.rpm
 2da3aeeb0e73febb0d92a41555a86a38  corporate/4.0/i586/python-2.4.5-0.3.20060mlcs4.i586.rpm
 2c178dda7e62b4bf7a2f9970b11454ee  corporate/4.0/i586/python-base-2.4.5-0.3.20060mlcs4.i586.rpm
 2df404bd0b04f16860b1152cd00a52b2  corporate/4.0/i586/python-docs-2.4.5-0.3.20060mlcs4.i586.rpm
 a095125a026ecaf9187c33a61aa50486  corporate/4.0/i586/tkinter-2.4.5-0.3.20060mlcs4.i586.rpm 
 86b2985d74be8c13e30372425bb3e549  corporate/4.0/SRPMS/python-2.4.5-0.3.20060mlcs4.src.rpm

CS3.0 i586

 91e05c8b6f93cb16180aa4a843e765c2  corporate/3.0/i586/libpython2.3-2.3.7-0.3.C30mdk.i586.rpm
 d4ac68c7582712187691bc746ccbff3d  corporate/3.0/i586/libpython2.3-devel-2.3.7-0.3.C30mdk.i586.rpm
 0b5d65e56944135be61affe8005883d0  corporate/3.0/i586/python-2.3.7-0.3.C30mdk.i586.rpm
 f75ff9f728b94997571a8d0d74a7ab21  corporate/3.0/i586/python-base-2.3.7-0.3.C30mdk.i586.rpm
 a8d1dca0dc331ba20370693a40180b8a  corporate/3.0/i586/python-docs-2.3.7-0.3.C30mdk.i586.rpm
 da0d1cde85111104f754f2917c330d43  corporate/3.0/i586/tkinter-2.3.7-0.3.C30mdk.i586.rpm 
 2e721dd00daf3f183b0b2f08fda11d22  corporate/3.0/SRPMS/python-2.3.7-0.3.C30mdk.src.rpm

MES5 i586

 6aeb5877fbf4d54183fbacda6ad9682e  mes5/i586/libpython2.5-2.5.2-5.3mdvmes5.i586.rpm
 1e9bfe0c30d17f3cf0607d44f9c92c16  mes5/i586/libpython2.5-devel-2.5.2-5.3mdvmes5.i586.rpm
 c9418d922c8b2f5a8345cc4a392176a2  mes5/i586/python-2.5.2-5.3mdvmes5.i586.rpm
 597d30dcf87da029d31a3e8f8c233c48  mes5/i586/python-base-2.5.2-5.3mdvmes5.i586.rpm
 eedb70bf05cf65fdb630eb58e8e204bd  mes5/i586/python-docs-2.5.2-5.3mdvmes5.i586.rpm
 13ec4b95422075d9918301c33d436f77  mes5/i586/tkinter-2.5.2-5.3mdvmes5.i586.rpm
 48593ff9af36df2463a7b93b734b8543  mes5/i586/tkinter-apps-2.5.2-5.3mdvmes5.i586.rpm 
 0330dea8c2ebbac05df306a559a73b21  mes5/SRPMS/python-2.5.2-5.3mdvmes5.src.rpm

2008.1 x86_64

 5167564837a0738bbd75a291aff5f9ae  2008.1/x86_64/lib64python2.5-2.5.2-2.4mdv2008.1.x86_64.rpm
 39ad271ea137fd9fe5fb7ae6463cd5ed  2008.1/x86_64/lib64python2.5-devel-2.5.2-2.4mdv2008.1.x86_64.rpm
 8a3da29b65af4b47d7e6fd71b466b23a  2008.1/x86_64/python-2.5.2-2.4mdv2008.1.x86_64.rpm
 48bbff9fdaa65b079be904c4b0605235  2008.1/x86_64/python-base-2.5.2-2.4mdv2008.1.x86_64.rpm
 f0013decf0a71de2b9d170cffeb4aaf4  2008.1/x86_64/python-docs-2.5.2-2.4mdv2008.1.x86_64.rpm
 b6503232d22add8000aa5492304299f5  2008.1/x86_64/tkinter-2.5.2-2.4mdv2008.1.x86_64.rpm
 90bbc302ae26762062d3e8580765527e  2008.1/x86_64/tkinter-apps-2.5.2-2.4mdv2008.1.x86_64.rpm 
 7c3531beccdeba86834ab34353b0b63a  2008.1/SRPMS/python-2.5.2-2.4mdv2008.1.src.rpm

2009.1 x86_64

 32ed19f4b67a2740dd78edffef5483ee  2009.1/x86_64/lib64python2.6-2.6.1-6.1mdv2009.1.x86_64.rpm
 f313d28183f7c0d69c37d5beaddc4e48  2009.1/x86_64/lib64python2.6-devel-2.6.1-6.1mdv2009.1.x86_64.rpm
 d066fecdbb264e9ba2534b7284724d75  2009.1/x86_64/python-2.6.1-6.1mdv2009.1.x86_64.rpm
 9f08828ee1728ae00b1e356cc861b772  2009.1/x86_64/python-docs-2.6.1-6.1mdv2009.1.x86_64.rpm
 833945b29fafdfd2dbab7495f101c5f7  2009.1/x86_64/tkinter-2.6.1-6.1mdv2009.1.x86_64.rpm
 6f693f90697406427c09f8312ca2bd04  2009.1/x86_64/tkinter-apps-2.6.1-6.1mdv2009.1.x86_64.rpm 
 6b7c29642be5f8aa998fc4bd5f571f9e  2009.1/SRPMS/python-2.6.1-6.1mdv2009.1.src.rpm

MES5 x86_64

 4c0809b8bcf86cac61e822a81243b3b1  mes5/x86_64/lib64python2.5-2.5.2-5.3mdvmes5.x86_64.rpm
 3927c5aab093995c5c6905823aa11788  mes5/x86_64/lib64python2.5-devel-2.5.2-5.3mdvmes5.x86_64.rpm
 be5b5099bf96b950546aad1f7ecfc760  mes5/x86_64/python-2.5.2-5.3mdvmes5.x86_64.rpm
 20e7190df22fef0732cbeb483153a263  mes5/x86_64/python-base-2.5.2-5.3mdvmes5.x86_64.rpm
 eca0caa1153fee3826332d69e4c05d00  mes5/x86_64/python-docs-2.5.2-5.3mdvmes5.x86_64.rpm
 0a4f9fdc713d24bc2507ac48b3db0a7b  mes5/x86_64/tkinter-2.5.2-5.3mdvmes5.x86_64.rpm
 04ca6bc6d763cf68d3e3705d8259172f  mes5/x86_64/tkinter-apps-2.5.2-5.3mdvmes5.x86_64.rpm 
 0330dea8c2ebbac05df306a559a73b21  mes5/SRPMS/python-2.5.2-5.3mdvmes5.src.rpm

References