Nom du paquet
python
Date
2008-01-14
Advisory ID
MDVSA-2008:013
Affected versions
2007.0 x86_64 , 2007.1 i586 , 2007.0 i586 , CS4.0 i586 , 2008.0 x86_64 , CS4.0 x86_64 , 2008.0 i586 , 2007.1 x86_64

Problem description

Multiple integer overflows were found in python's imageop module.
If an application written in python used the imageop module to
process untrusted images, it could cause the application to crash,
enter an infinite loop, or possibly execute arbitrary code with the
privileges of the python interpreter.

The updated packages have been patched to correct this issue.

Updated packages

2007.0 x86_64

 caaa07f3f09cfcea0bd1e8973799ffef  2007.0/x86_64/lib64python2.4-2.4.3-3.3mdv2007.0.x86_64.rpm
 969e366d80532376e1eea4679b0ac0fb  2007.0/x86_64/lib64python2.4-devel-2.4.3-3.3mdv2007.0.x86_64.rpm
 df60e3b77cc2e0653781fba0d2dd0b55  2007.0/x86_64/python-2.4.3-3.3mdv2007.0.x86_64.rpm
 e23dadbd0a78fe5a3ed85d5cc1aec10b  2007.0/x86_64/python-base-2.4.3-3.3mdv2007.0.x86_64.rpm
 19b0ae3d1ab4fe68ea3ffbe43c3b0942  2007.0/x86_64/python-docs-2.4.3-3.3mdv2007.0.x86_64.rpm
 9daa7753a70117f94e478357824ee274  2007.0/x86_64/tkinter-2.4.3-3.3mdv2007.0.x86_64.rpm 
 3f4dcfcafa39b91533d2a6995d57900b  2007.0/SRPMS/python-2.4.3-3.3mdv2007.0.src.rpm

2007.1 i586

 83789918b32161771fc31de1c0276abc  2007.1/i586/libpython2.5-2.5-4.2mdv2007.1.i586.rpm
 fb805a3c75630617183bddd8b1876317  2007.1/i586/libpython2.5-devel-2.5-4.2mdv2007.1.i586.rpm
 e33c7874ed3d6d567f581c5698925ec8  2007.1/i586/python-2.5-4.2mdv2007.1.i586.rpm
 0397f12fdddf81747abdee00035aa652  2007.1/i586/python-base-2.5-4.2mdv2007.1.i586.rpm
 9afc73871e8e9aac908728f2895fad17  2007.1/i586/python-docs-2.5-4.2mdv2007.1.i586.rpm
 36dbd270e4ce9d14a4cf00cb82218721  2007.1/i586/tkinter-2.5-4.2mdv2007.1.i586.rpm 
 e87524f2a4ba782fb8dc1616d52a5210  2007.1/SRPMS/python-2.5-4.2mdv2007.1.src.rpm

2007.0 i586

 2aa2d395f88ba6a4d59c9768d838bbc9  2007.0/i586/libpython2.4-2.4.3-3.3mdv2007.0.i586.rpm
 42e7a809d98b494c397b02536f563e3f  2007.0/i586/libpython2.4-devel-2.4.3-3.3mdv2007.0.i586.rpm
 8047a106fcacb1a389fc62a4c0a1ffe1  2007.0/i586/python-2.4.3-3.3mdv2007.0.i586.rpm
 5fc7ec936e59f3dbaf4195e68838c260  2007.0/i586/python-base-2.4.3-3.3mdv2007.0.i586.rpm
 3f08259502861bfd057c9a675824eed1  2007.0/i586/python-docs-2.4.3-3.3mdv2007.0.i586.rpm
 295ec06fd92677faa81958b3dc15673f  2007.0/i586/tkinter-2.4.3-3.3mdv2007.0.i586.rpm 
 3f4dcfcafa39b91533d2a6995d57900b  2007.0/SRPMS/python-2.4.3-3.3mdv2007.0.src.rpm

CS4.0 i586

 38717e896327570dbbe5bf52099b45a4  corporate/4.0/i586/libpython2.4-2.4.1-5.3.20060mlcs4.i586.rpm
 4584b1a54de62e416aa088d0f5c58aaf  corporate/4.0/i586/libpython2.4-devel-2.4.1-5.3.20060mlcs4.i586.rpm
 c17ae6ab96b00477d4d43f9503dd5586  corporate/4.0/i586/python-2.4.1-5.3.20060mlcs4.i586.rpm
 f6e5380393fbaab901856846f45cb872  corporate/4.0/i586/python-base-2.4.1-5.3.20060mlcs4.i586.rpm
 2e153a8f3d28c7bcdf203429601dd5a3  corporate/4.0/i586/python-docs-2.4.1-5.3.20060mlcs4.i586.rpm
 c09dbfa148bc49ff700c534e60456249  corporate/4.0/i586/tkinter-2.4.1-5.3.20060mlcs4.i586.rpm 
 ed33c06ab7a6c1235121330dfc7c14ea  corporate/4.0/SRPMS/python-2.4.1-5.3.20060mlcs4.src.rpm

2008.0 x86_64

 c759088550b15fe216d9d42d4f205ae3  2008.0/x86_64/lib64python2.5-2.5.1-5.1mdv2008.0.x86_64.rpm
 c98822c30fff7d1b28f77db91c20e094  2008.0/x86_64/lib64python2.5-devel-2.5.1-5.1mdv2008.0.x86_64.rpm
 786551ac171968deba675aac73bd25f9  2008.0/x86_64/python-2.5.1-5.1mdv2008.0.x86_64.rpm
 ded534c04a11298591276b573cd84fac  2008.0/x86_64/python-base-2.5.1-5.1mdv2008.0.x86_64.rpm
 7cdc40b041fab7c0462e7d01accd72e2  2008.0/x86_64/python-docs-2.5.1-5.1mdv2008.0.x86_64.rpm
 70ce8cebd5a034e45da35152feb07c4d  2008.0/x86_64/tkinter-2.5.1-5.1mdv2008.0.x86_64.rpm
 6bc778f57d71c0206a265e817644395a  2008.0/x86_64/tkinter-apps-2.5.1-5.1mdv2008.0.x86_64.rpm 
 aa344e978d53a329b717cae3ffaa6a38  2008.0/SRPMS/python-2.5.1-5.1mdv2008.0.src.rpm

CS4.0 x86_64

 dc60e48b88c515fd370bef76434df88e  corporate/4.0/x86_64/lib64python2.4-2.4.1-5.3.20060mlcs4.x86_64.rpm
 cd4810341e9e49cc2e607a4ae067fd78  corporate/4.0/x86_64/lib64python2.4-devel-2.4.1-5.3.20060mlcs4.x86_64.rpm
 d71bbb307d68599831ff0c30d0968cc3  corporate/4.0/x86_64/python-2.4.1-5.3.20060mlcs4.x86_64.rpm
 945f1355d6a357b0666512f1fd485f61  corporate/4.0/x86_64/python-base-2.4.1-5.3.20060mlcs4.x86_64.rpm
 f905de87ed4a5d0dd0239d8896d39243  corporate/4.0/x86_64/python-docs-2.4.1-5.3.20060mlcs4.x86_64.rpm
 cca9d202eb85b96a1c61c396e125637d  corporate/4.0/x86_64/tkinter-2.4.1-5.3.20060mlcs4.x86_64.rpm 
 ed33c06ab7a6c1235121330dfc7c14ea  corporate/4.0/SRPMS/python-2.4.1-5.3.20060mlcs4.src.rpm

2008.0 i586

 402de17d03c279d7473dc00bfb30fa29  2008.0/i586/libpython2.5-2.5.1-5.1mdv2008.0.i586.rpm
 460006b33d6d8d221119e757d0e53997  2008.0/i586/libpython2.5-devel-2.5.1-5.1mdv2008.0.i586.rpm
 006d53e8c4c5344f3333a5e88a8e5353  2008.0/i586/python-2.5.1-5.1mdv2008.0.i586.rpm
 6f688cfe64f97febd7b4b1fde1444a4e  2008.0/i586/python-base-2.5.1-5.1mdv2008.0.i586.rpm
 2cfbc489e172026680449de3549e4451  2008.0/i586/python-docs-2.5.1-5.1mdv2008.0.i586.rpm
 55dbf574855f61c4cddcf24d86004fef  2008.0/i586/tkinter-2.5.1-5.1mdv2008.0.i586.rpm
 b0a635daa3bd47a95ea97fa1e28869e4  2008.0/i586/tkinter-apps-2.5.1-5.1mdv2008.0.i586.rpm 
 aa344e978d53a329b717cae3ffaa6a38  2008.0/SRPMS/python-2.5.1-5.1mdv2008.0.src.rpm

2007.1 x86_64

 a4e9f1cac6e2f4bb101ec44993787e8a  2007.1/x86_64/lib64python2.5-2.5-4.2mdv2007.1.x86_64.rpm
 d36b5ee8b915aeb0aeacfb31c72b0d5b  2007.1/x86_64/lib64python2.5-devel-2.5-4.2mdv2007.1.x86_64.rpm
 11c9d94ace60556d0742b7df15f26e20  2007.1/x86_64/python-2.5-4.2mdv2007.1.x86_64.rpm
 5733c0d34ad9d474f09d72e081e8abb5  2007.1/x86_64/python-base-2.5-4.2mdv2007.1.x86_64.rpm
 c111909ca5e251969157d0846aaddab5  2007.1/x86_64/python-docs-2.5-4.2mdv2007.1.x86_64.rpm
 d0ebc98fb24040adada7f5a1cb0786da  2007.1/x86_64/tkinter-2.5-4.2mdv2007.1.x86_64.rpm 
 e87524f2a4ba782fb8dc1616d52a5210  2007.1/SRPMS/python-2.5-4.2mdv2007.1.src.rpm

References