MDKSA-2007:099
- Nom du paquet
- python
- Date
- 2007-05-08
- Advisory ID
- MDKSA-2007:099
- Affected versions
- CS4.0 x86_64 , MNF2.0 i586 , 2007.0 x86_64 , 2007.1 i586 , 2007.0 i586 , CS3.0 x86_64 , CS4.0 i586 , CS3.0 i586 , 2007.1 x86_64
Problem description
An off-by-one error was discovered in the PyLocale_strxfrm function
in Python 2.4 and 2.5 that could allow context-dependent attackers
the ability to read portions of memory via special manipulations that
trigger a buffer over-read due to missing null termination.
The updated packages have been patched to correct this issue.
Updated packages
CS4.0 x86_64
12e5b0f59a6b5f13d94cabd7daa72398 corporate/4.0/x86_64/lib64python2.4-2.4.1-5.2.20060mlcs4.x86_64.rpm 1c16599348b73153c9085d15b6242ed5 corporate/4.0/x86_64/lib64python2.4-devel-2.4.1-5.2.20060mlcs4.x86_64.rpm 182624751d942ffcc4707d54828d8be0 corporate/4.0/x86_64/python-2.4.1-5.2.20060mlcs4.x86_64.rpm 5c8f306b3d864db59e3e5ea4bf9cb762 corporate/4.0/x86_64/python-base-2.4.1-5.2.20060mlcs4.x86_64.rpm 6211da765373858436fe62a318aa1666 corporate/4.0/x86_64/python-docs-2.4.1-5.2.20060mlcs4.x86_64.rpm 805952c88f6b51596be704f7d68a401b corporate/4.0/x86_64/tkinter-2.4.1-5.2.20060mlcs4.x86_64.rpm c93d08d3be64f3296a6002dd18162bf7 corporate/4.0/SRPMS/python-2.4.1-5.2.20060mlcs4.src.rpm
MNF2.0 i586
2d3ec003329f84d36fd6cf64c3e3ccc5 mnf/2.0/i586/libpython2.3-2.3.3-2.4.M20mdk.i586.rpm 116908107bda1a9940ccc34e0f34cd19 mnf/2.0/i586/libpython2.3-devel-2.3.3-2.4.M20mdk.i586.rpm f94e5be67c898f21384411738f3bfe13 mnf/2.0/i586/python-2.3.3-2.4.M20mdk.i586.rpm 0647fb2e63071375d64e5eb964f1a22c mnf/2.0/i586/python-base-2.3.3-2.4.M20mdk.i586.rpm cb6386daf24ae543ba84b774971676e0 mnf/2.0/i586/python-docs-2.3.3-2.4.M20mdk.i586.rpm 70775ea2a5c73577a015c80179b694d0 mnf/2.0/i586/tkinter-2.3.3-2.4.M20mdk.i586.rpm 7dedeefe7a1d7a1ff337bb8a5927960f mnf/2.0/SRPMS/python-2.3.3-2.4.M20mdk.src.rpm
2007.0 x86_64
512d998bab61c40a8258ad88fc5ba01e 2007.0/x86_64/lib64python2.4-2.4.3-3.2mdv2007.0.x86_64.rpm a3c06fa92f8f122591e71af4c1560a2f 2007.0/x86_64/lib64python2.4-devel-2.4.3-3.2mdv2007.0.x86_64.rpm a8a6809b466a84f0b9a3b54f118b4cc4 2007.0/x86_64/python-2.4.3-3.2mdv2007.0.x86_64.rpm 66a8d0ec2bcf38269f9e8b7680834ed8 2007.0/x86_64/python-base-2.4.3-3.2mdv2007.0.x86_64.rpm 1008036e8043cc5a6a16692f727962b1 2007.0/x86_64/python-docs-2.4.3-3.2mdv2007.0.x86_64.rpm 64f804575b72200ce7a0e63bbe48a603 2007.0/x86_64/tkinter-2.4.3-3.2mdv2007.0.x86_64.rpm 2e8ead2656b638871f73330c544a5359 2007.0/SRPMS/python-2.4.3-3.2mdv2007.0.src.rpm
2007.1 i586
48e57e010f2c6d4bc40e8ab694f36227 2007.1/i586/libpython2.5-2.5-4.1mdv2007.1.i586.rpm e349b0a6060e9a884b635cdc5eea1aa1 2007.1/i586/libpython2.5-devel-2.5-4.1mdv2007.1.i586.rpm 7d4a063c40b0974328294c6c38a49301 2007.1/i586/python-2.5-4.1mdv2007.1.i586.rpm 7731c37d3e20151bd5e3558a151027de 2007.1/i586/python-base-2.5-4.1mdv2007.1.i586.rpm 8bf51da0f03fd148480bbf0a06498aac 2007.1/i586/python-docs-2.5-4.1mdv2007.1.i586.rpm 7314c9500b0e494f3d8cd3204f1fbb0e 2007.1/i586/tkinter-2.5-4.1mdv2007.1.i586.rpm 9aee44decebb69373673aa4b31f2bfef 2007.1/SRPMS/python-2.5-4.1mdv2007.1.src.rpm
2007.0 i586
fe74992a7b6f6e6831ad12a4ddf1efab 2007.0/i586/libpython2.4-2.4.3-3.2mdv2007.0.i586.rpm 486ad94946de0c154806149e32fc5377 2007.0/i586/libpython2.4-devel-2.4.3-3.2mdv2007.0.i586.rpm 06da4fbb8161ad8d2d041a765c9bd3a4 2007.0/i586/python-2.4.3-3.2mdv2007.0.i586.rpm e2b9a0e926a031064c679f96ab56a549 2007.0/i586/python-base-2.4.3-3.2mdv2007.0.i586.rpm 69662a908b2b58e7566775e33c0f7c04 2007.0/i586/python-docs-2.4.3-3.2mdv2007.0.i586.rpm 05e7ec9f4c6e8ac87300bcaad74e88c7 2007.0/i586/tkinter-2.4.3-3.2mdv2007.0.i586.rpm 2e8ead2656b638871f73330c544a5359 2007.0/SRPMS/python-2.4.3-3.2mdv2007.0.src.rpm
CS3.0 x86_64
0bacb2fc09a53bd79b3ca5a7e1466293 corporate/3.0/x86_64/lib64python2.3-2.3.3-2.4.C30mdk.x86_64.rpm 7b16e0f0487b3f2b8df9d5466235d762 corporate/3.0/x86_64/lib64python2.3-devel-2.3.3-2.4.C30mdk.x86_64.rpm 788307fb0fc1210e21f5101d833c7e06 corporate/3.0/x86_64/python-2.3.3-2.4.C30mdk.x86_64.rpm 22876f4caaba1b887a6f91fc42e7dc82 corporate/3.0/x86_64/python-base-2.3.3-2.4.C30mdk.x86_64.rpm 241da835482fc4d3662760f54c3ee60b corporate/3.0/x86_64/python-docs-2.3.3-2.4.C30mdk.x86_64.rpm 5494ce601d236eeba65cae815dfff20d corporate/3.0/x86_64/tkinter-2.3.3-2.4.C30mdk.x86_64.rpm 410c1764fce544f9d6928b4277d4eb0a corporate/3.0/SRPMS/python-2.3.3-2.4.C30mdk.src.rpm
CS4.0 i586
6a896ef81fbf3575160141f4957bc562 corporate/4.0/i586/libpython2.4-2.4.1-5.2.20060mlcs4.i586.rpm 77fcfe6d35783de11d215c756655967d corporate/4.0/i586/libpython2.4-devel-2.4.1-5.2.20060mlcs4.i586.rpm 670254207d969b1ea7941d3af74a92f3 corporate/4.0/i586/python-2.4.1-5.2.20060mlcs4.i586.rpm 7a3d1475a93f18cc39e6d40d6b11ed00 corporate/4.0/i586/python-base-2.4.1-5.2.20060mlcs4.i586.rpm 9b1a19d23ef58cf8bac99777d32a81e4 corporate/4.0/i586/python-docs-2.4.1-5.2.20060mlcs4.i586.rpm 8cac9fb2582c7829c5dc0f63e850de79 corporate/4.0/i586/tkinter-2.4.1-5.2.20060mlcs4.i586.rpm c93d08d3be64f3296a6002dd18162bf7 corporate/4.0/SRPMS/python-2.4.1-5.2.20060mlcs4.src.rpm
CS3.0 i586
22141898464fda308a2f91516e1426cb corporate/3.0/i586/libpython2.3-2.3.3-2.4.C30mdk.i586.rpm 0f112257db4e383b87e0d9a30ea44d3f corporate/3.0/i586/libpython2.3-devel-2.3.3-2.4.C30mdk.i586.rpm c13b11f924c8586b7a9a113597094d26 corporate/3.0/i586/python-2.3.3-2.4.C30mdk.i586.rpm 74bb3c949621a653976fae5fe3d3a479 corporate/3.0/i586/python-base-2.3.3-2.4.C30mdk.i586.rpm 121571a9f17d42f84489fa5f59f92d15 corporate/3.0/i586/python-docs-2.3.3-2.4.C30mdk.i586.rpm 2a4bb4733f6b08ab310cdfe709222c57 corporate/3.0/i586/tkinter-2.3.3-2.4.C30mdk.i586.rpm 410c1764fce544f9d6928b4277d4eb0a corporate/3.0/SRPMS/python-2.3.3-2.4.C30mdk.src.rpm
2007.1 x86_64
37f375c1ceef5fe9182a2e293dd35cc2 2007.1/x86_64/lib64python2.5-2.5-4.1mdv2007.1.x86_64.rpm 864eb9b480c4961252f8c1ee954a088e 2007.1/x86_64/lib64python2.5-devel-2.5-4.1mdv2007.1.x86_64.rpm c01eaebf2839c29f14b9c1a24897a47e 2007.1/x86_64/python-2.5-4.1mdv2007.1.x86_64.rpm 00fdd58a1aaf31c3745e2a62bd4cf67d 2007.1/x86_64/python-base-2.5-4.1mdv2007.1.x86_64.rpm 1d6f01a7176b1a7f0f93decc61767b70 2007.1/x86_64/python-docs-2.5-4.1mdv2007.1.x86_64.rpm c32da2ed04805eac862afc9f6ba82779 2007.1/x86_64/tkinter-2.5-4.1mdv2007.1.x86_64.rpm 9aee44decebb69373673aa4b31f2bfef 2007.1/SRPMS/python-2.5-4.1mdv2007.1.src.rpm