MDVSA-2010:132
- Nom du paquet
- python
- Date
- 2010-07-14
- Advisory ID
- MDVSA-2010:132
- Affected versions
- 2009.0 x86_64 , MES5 i586 , 2010.1 i586 , 2010.0 x86_64 , 2010.0 i586 , 2009.1 i586 , 2009.0 i586 , CS4.0 i586 , 2008.0 x86_64 , CS4.0 x86_64 , 2008.0 i586 , 2009.1 x86_64 , MES5 x86_64 , 2010.1 x86_64
Problem description
Multiple vulnerabilities has been found and corrected in python:
Multiple integer overflows in audioop.c in the audioop module in
Ptthon allow context-dependent attackers to cause a denial of service
(application crash) via a large fragment, as demonstrated by a call
to audioop.lin2lin with a long string in the first argument, leading
to a buffer overflow. NOTE: this vulnerability exists because of an
incorrect fix for CVE-2008-3143.5 (CVE-2010-1634).
The audioop module in Python does not verify the relationships between
size arguments and byte string lengths, which allows context-dependent
attackers to cause a denial of service (memory corruption and
application crash) via crafted arguments, as demonstrated by a call
to audioop.reverse with a one-byte string, a different vulnerability
than CVE-2010-1634 (CVE-2010-2089).
Packages for 2008.0 and 2009.0 are provided as of the Extended
Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490
The updated packages have been patched to correct these issues.
Updated packages
2009.0 x86_64
f22f06db4cc4e8f431aadeaa552f0891 2009.0/x86_64/lib64python2.5-2.5.2-5.6mdv2009.0.x86_64.rpm a15984e4b2e6821789ba36760aa08a79 2009.0/x86_64/lib64python2.5-devel-2.5.2-5.6mdv2009.0.x86_64.rpm 329f34c1eb9cbf68805edcbb0efda8a2 2009.0/x86_64/python-2.5.2-5.6mdv2009.0.x86_64.rpm 5404e1caa073784bbcb6aab8dff592bf 2009.0/x86_64/python-base-2.5.2-5.6mdv2009.0.x86_64.rpm 59e2bbd0517468929db90ad4e9448dc7 2009.0/x86_64/python-docs-2.5.2-5.6mdv2009.0.x86_64.rpm b9821ba18b02ad9ae3b5831ac4893fee 2009.0/x86_64/tkinter-2.5.2-5.6mdv2009.0.x86_64.rpm 3593d6bdf3fbc698301edee3d0906e58 2009.0/x86_64/tkinter-apps-2.5.2-5.6mdv2009.0.x86_64.rpm a6602a71f4573ecb82951a861165fee8 2009.0/SRPMS/python-2.5.2-5.6mdv2009.0.src.rpm
MES5 i586
28d975daaf5f623144e20493dd451745 mes5/i586/libpython2.5-2.5.2-5.7mdvmes5.1.i586.rpm 2aff847d8b904ded1e3af26f2104959c mes5/i586/libpython2.5-devel-2.5.2-5.7mdvmes5.1.i586.rpm 7453da455746ae242478602e28f8ad54 mes5/i586/python-2.5.2-5.7mdvmes5.1.i586.rpm 50ef79c0fe2a2ddb0768e9e42cd1a78d mes5/i586/python-base-2.5.2-5.7mdvmes5.1.i586.rpm eaba93ba9f5a77fdcd23b199c81ecf10 mes5/i586/python-docs-2.5.2-5.7mdvmes5.1.i586.rpm 6c0014be0c8647ac1c0ad4e6a5d48c92 mes5/i586/tkinter-2.5.2-5.7mdvmes5.1.i586.rpm 78fe0ba52d451894a19be61b1b41a8f7 mes5/i586/tkinter-apps-2.5.2-5.7mdvmes5.1.i586.rpm 49d1708b056d60fb851ce89033d84224 mes5/SRPMS/python-2.5.2-5.7mdvmes5.1.src.rpm
2010.1 i586
77685502f90b113db3ba22822b3cf9fc 2010.1/i586/libpython2.6-2.6.5-2.1mdv2010.1.i586.rpm bf9e3d224cf0059ec9344b034ec077af 2010.1/i586/libpython2.6-devel-2.6.5-2.1mdv2010.1.i586.rpm 5d7158a82859935be01a4be3d9ab13d8 2010.1/i586/python-2.6.5-2.1mdv2010.1.i586.rpm b6a754e44856a2f3cef1c27cda7607d6 2010.1/i586/python-docs-2.6.5-2.1mdv2010.1.i586.rpm 0f4fa85de1e74e999e32231d09a9a8f2 2010.1/i586/tkinter-2.6.5-2.1mdv2010.1.i586.rpm dca56ed98ff41e72884d1f0d06d77f40 2010.1/i586/tkinter-apps-2.6.5-2.1mdv2010.1.i586.rpm 107556cf0daafd475511abb2b598b7e3 2010.1/SRPMS/python-2.6.5-2.1mdv2010.1.src.rpm
2010.0 x86_64
213ec645079b9cf5e32898fcbfc28fad 2010.0/x86_64/lib64python2.6-2.6.4-1.3mdv2010.0.x86_64.rpm 37b43ce708c77e503c1f93b26a168605 2010.0/x86_64/lib64python2.6-devel-2.6.4-1.3mdv2010.0.x86_64.rpm 9a3a70fe1762ee70dbc8262ee662c39b 2010.0/x86_64/python-2.6.4-1.3mdv2010.0.x86_64.rpm ded2b20c7d903a2294425222d5e9ca62 2010.0/x86_64/python-docs-2.6.4-1.3mdv2010.0.x86_64.rpm 0be4dcaea55b6c0b7e6876d62ec7e7b6 2010.0/x86_64/tkinter-2.6.4-1.3mdv2010.0.x86_64.rpm cee4059bb748ee05150955eb4e2167f6 2010.0/x86_64/tkinter-apps-2.6.4-1.3mdv2010.0.x86_64.rpm b8341a9e215e7986ff904d7fdf74804c 2010.0/SRPMS/python-2.6.4-1.3mdv2010.0.src.rpm
2010.0 i586
5f0ff97a0a93f7dd724156b4c75a189f 2010.0/i586/libpython2.6-2.6.4-1.3mdv2010.0.i586.rpm ed6881e0fbf01066dfd29ce5b415931c 2010.0/i586/libpython2.6-devel-2.6.4-1.3mdv2010.0.i586.rpm 3324fa6ce72997b71417b7425e3c8caf 2010.0/i586/python-2.6.4-1.3mdv2010.0.i586.rpm 6d842db0d14e29b1c007b99b78926e5d 2010.0/i586/python-docs-2.6.4-1.3mdv2010.0.i586.rpm bd34f1e94486390acff010381d08da03 2010.0/i586/tkinter-2.6.4-1.3mdv2010.0.i586.rpm 02521a044b36eb44ef9854f38b83364a 2010.0/i586/tkinter-apps-2.6.4-1.3mdv2010.0.i586.rpm b8341a9e215e7986ff904d7fdf74804c 2010.0/SRPMS/python-2.6.4-1.3mdv2010.0.src.rpm
2009.1 i586
3404f9ddf0f432a2ba81e78ce0408fd8 2009.1/i586/libpython2.6-2.6.1-6.4mdv2009.1.i586.rpm 1642bfa7d7c8c2979f80491cd592447b 2009.1/i586/libpython2.6-devel-2.6.1-6.4mdv2009.1.i586.rpm e32c4080ae403710eb91bf8508430ecb 2009.1/i586/python-2.6.1-6.4mdv2009.1.i586.rpm f8221639b02160a28dc7c96d48050195 2009.1/i586/python-docs-2.6.1-6.4mdv2009.1.i586.rpm d1488967010eb649113916a3eef85213 2009.1/i586/tkinter-2.6.1-6.4mdv2009.1.i586.rpm c6c3a71a9efa1b8f010027a6d1418fa6 2009.1/i586/tkinter-apps-2.6.1-6.4mdv2009.1.i586.rpm 08fb9cd480e9a5ffa2efe603c17b0e71 2009.1/SRPMS/python-2.6.1-6.4mdv2009.1.src.rpm
2009.0 i586
598630ce234cff98465351b4af90d664 2009.0/i586/libpython2.5-2.5.2-5.6mdv2009.0.i586.rpm 44a691ffb51a47dd653fbf03d5a9be00 2009.0/i586/libpython2.5-devel-2.5.2-5.6mdv2009.0.i586.rpm ea55908df10ad9e82a5d361612bcbca7 2009.0/i586/python-2.5.2-5.6mdv2009.0.i586.rpm cb25c56f6f68e0bb036cd1be0360595d 2009.0/i586/python-base-2.5.2-5.6mdv2009.0.i586.rpm 0161f8c43b4fbf019ef24a72760d3113 2009.0/i586/python-docs-2.5.2-5.6mdv2009.0.i586.rpm 987651d11ca710910a89e52330873187 2009.0/i586/tkinter-2.5.2-5.6mdv2009.0.i586.rpm a73ba0fa7adcb1ebe2806335e575e8b2 2009.0/i586/tkinter-apps-2.5.2-5.6mdv2009.0.i586.rpm a6602a71f4573ecb82951a861165fee8 2009.0/SRPMS/python-2.5.2-5.6mdv2009.0.src.rpm
CS4.0 i586
24663decfe6c6ba75771371777834d6a corporate/4.0/i586/libpython2.4-2.4.5-0.6.20060mlcs4.i586.rpm 2d362036a85055bcae84aa30e320425b corporate/4.0/i586/libpython2.4-devel-2.4.5-0.6.20060mlcs4.i586.rpm 07a94afed3c78c4e071197ba7dba676b corporate/4.0/i586/python-2.4.5-0.6.20060mlcs4.i586.rpm b46bc657628e0790dc68c0298d0fa8c2 corporate/4.0/i586/python-base-2.4.5-0.6.20060mlcs4.i586.rpm 00fea68fc4a04885a56d4979dbcd4805 corporate/4.0/i586/python-docs-2.4.5-0.6.20060mlcs4.i586.rpm e7f1dd4a85e67c89d9053bbd5a0dcb1d corporate/4.0/i586/tkinter-2.4.5-0.6.20060mlcs4.i586.rpm 2bd3365c9ce6ef9caf80b7824e5cdba2 corporate/4.0/SRPMS/python-2.4.5-0.6.20060mlcs4.src.rpm
2008.0 x86_64
5f9e4e0e27dfa80a7fa2bf62998edf25 2008.0/x86_64/lib64python2.5-2.5.2-2.7mdv2008.0.x86_64.rpm 36bfe236a350a8e9a0e2657eefadd299 2008.0/x86_64/lib64python2.5-devel-2.5.2-2.7mdv2008.0.x86_64.rpm c03cc44dac5ecdf49d7bf2ca5ad5477a 2008.0/x86_64/python-2.5.2-2.7mdv2008.0.x86_64.rpm 1965d6962b5cfe7349f4369bceda2ce4 2008.0/x86_64/python-base-2.5.2-2.7mdv2008.0.x86_64.rpm e13c770d7ddcc045251733d69865a3ae 2008.0/x86_64/python-docs-2.5.2-2.7mdv2008.0.x86_64.rpm cff8d5ef80f29b2f9e32e171420ede11 2008.0/x86_64/tkinter-2.5.2-2.7mdv2008.0.x86_64.rpm e8d3db4327d427c9451bf604e5cd1bb7 2008.0/x86_64/tkinter-apps-2.5.2-2.7mdv2008.0.x86_64.rpm 211a673f3cd2e1b7d153d6f40291ad86 2008.0/SRPMS/python-2.5.2-2.7mdv2008.0.src.rpm
CS4.0 x86_64
6a321e2d0675667c4a20ca9eef9e659f corporate/4.0/x86_64/lib64python2.4-2.4.5-0.6.20060mlcs4.x86_64.rpm c4747b33200becebdf06b999233d2d85 corporate/4.0/x86_64/lib64python2.4-devel-2.4.5-0.6.20060mlcs4.x86_64.rpm f0e7f6603385328327f62613820d09ad corporate/4.0/x86_64/python-2.4.5-0.6.20060mlcs4.x86_64.rpm fab004a4528c0ea88257c28f68767232 corporate/4.0/x86_64/python-base-2.4.5-0.6.20060mlcs4.x86_64.rpm 949f7e382bebc814c821d619abfd5d57 corporate/4.0/x86_64/python-docs-2.4.5-0.6.20060mlcs4.x86_64.rpm f61e8d55e2a2be3c0dc62903fce980d5 corporate/4.0/x86_64/tkinter-2.4.5-0.6.20060mlcs4.x86_64.rpm 2bd3365c9ce6ef9caf80b7824e5cdba2 corporate/4.0/SRPMS/python-2.4.5-0.6.20060mlcs4.src.rpm
2008.0 i586
4f913679ea6f154f0d7c84c8bafd3fe3 2008.0/i586/libpython2.5-2.5.2-2.7mdv2008.0.i586.rpm dfab01f9210fa284ad3b4dd271bfb3dd 2008.0/i586/libpython2.5-devel-2.5.2-2.7mdv2008.0.i586.rpm b6245a9dc5423d14ba96f4f388dd0fe6 2008.0/i586/python-2.5.2-2.7mdv2008.0.i586.rpm 15c39b51c66cc78aec157eaed0267a7b 2008.0/i586/python-base-2.5.2-2.7mdv2008.0.i586.rpm e38a9894712bf82a8dcc1eee1265592c 2008.0/i586/python-docs-2.5.2-2.7mdv2008.0.i586.rpm 2f2100e6dd35a4aef8e503394a723e81 2008.0/i586/tkinter-2.5.2-2.7mdv2008.0.i586.rpm 29b96d4b84a7241fc78f55671f1a33f0 2008.0/i586/tkinter-apps-2.5.2-2.7mdv2008.0.i586.rpm 211a673f3cd2e1b7d153d6f40291ad86 2008.0/SRPMS/python-2.5.2-2.7mdv2008.0.src.rpm
2009.1 x86_64
363de5386b3df783c2d599295b6c9fd9 2009.1/x86_64/lib64python2.6-2.6.1-6.4mdv2009.1.x86_64.rpm f09af1e423ba5755b7b0b524d0a4fada 2009.1/x86_64/lib64python2.6-devel-2.6.1-6.4mdv2009.1.x86_64.rpm ce6deed593b82a1b973de15001f79362 2009.1/x86_64/python-2.6.1-6.4mdv2009.1.x86_64.rpm a58bbe02634432f582b8b433287863e5 2009.1/x86_64/python-docs-2.6.1-6.4mdv2009.1.x86_64.rpm 35868acab80516ebb52b08feeff616bb 2009.1/x86_64/tkinter-2.6.1-6.4mdv2009.1.x86_64.rpm ccb5413b65fd391a8d0fa553ec28b513 2009.1/x86_64/tkinter-apps-2.6.1-6.4mdv2009.1.x86_64.rpm 08fb9cd480e9a5ffa2efe603c17b0e71 2009.1/SRPMS/python-2.6.1-6.4mdv2009.1.src.rpm
MES5 x86_64
ad5c6abd37cd342183f540370bbbb03b mes5/x86_64/lib64python2.5-2.5.2-5.7mdvmes5.1.x86_64.rpm 2722a15a452703ff5b5ef6d6542e56d3 mes5/x86_64/lib64python2.5-devel-2.5.2-5.7mdvmes5.1.x86_64.rpm 2cac9f75b9cb85182e8a420329dfaccd mes5/x86_64/python-2.5.2-5.7mdvmes5.1.x86_64.rpm e04fdf9d4f629dd51b3bb27e22e4a152 mes5/x86_64/python-base-2.5.2-5.7mdvmes5.1.x86_64.rpm 77b9ee5a5be480ce55eccee414c0f4d5 mes5/x86_64/python-docs-2.5.2-5.7mdvmes5.1.x86_64.rpm 8de9bb41acd3ed981b9b44dbf7d139a5 mes5/x86_64/tkinter-2.5.2-5.7mdvmes5.1.x86_64.rpm 6d1a1b1173907b8602d7ca0ad71bc537 mes5/x86_64/tkinter-apps-2.5.2-5.7mdvmes5.1.x86_64.rpm 49d1708b056d60fb851ce89033d84224 mes5/SRPMS/python-2.5.2-5.7mdvmes5.1.src.rpm
2010.1 x86_64
14bcbf073fc47d3a423c6fefe15b5939 2010.1/x86_64/lib64python2.6-2.6.5-2.1mdv2010.1.x86_64.rpm 9acea2705dc72a6ad717fbcd961db368 2010.1/x86_64/lib64python2.6-devel-2.6.5-2.1mdv2010.1.x86_64.rpm 3e2047db297a58cef19bd3a22bab1953 2010.1/x86_64/python-2.6.5-2.1mdv2010.1.x86_64.rpm 618c9b3e812d73ae236a409ce1453a89 2010.1/x86_64/python-docs-2.6.5-2.1mdv2010.1.x86_64.rpm 8ad00fe7d002305ac26ff720ca3fc3ff 2010.1/x86_64/tkinter-2.6.5-2.1mdv2010.1.x86_64.rpm 3a8fdef37c200ca7b74f7e263dbaf04b 2010.1/x86_64/tkinter-apps-2.6.5-2.1mdv2010.1.x86_64.rpm 107556cf0daafd475511abb2b598b7e3 2010.1/SRPMS/python-2.6.5-2.1mdv2010.1.src.rpm