Nom du paquet
python
Date
2010-07-14
Advisory ID
MDVSA-2010:132
Affected versions
2009.0 x86_64 , MES5 i586 , 2010.1 i586 , 2010.0 x86_64 , 2010.0 i586 , 2009.1 i586 , 2009.0 i586 , CS4.0 i586 , 2008.0 x86_64 , CS4.0 x86_64 , 2008.0 i586 , 2009.1 x86_64 , MES5 x86_64 , 2010.1 x86_64

Problem description

Multiple vulnerabilities has been found and corrected in python:

Multiple integer overflows in audioop.c in the audioop module in
Ptthon allow context-dependent attackers to cause a denial of service
(application crash) via a large fragment, as demonstrated by a call
to audioop.lin2lin with a long string in the first argument, leading
to a buffer overflow. NOTE: this vulnerability exists because of an
incorrect fix for CVE-2008-3143.5 (CVE-2010-1634).

The audioop module in Python does not verify the relationships between
size arguments and byte string lengths, which allows context-dependent
attackers to cause a denial of service (memory corruption and
application crash) via crafted arguments, as demonstrated by a call
to audioop.reverse with a one-byte string, a different vulnerability
than CVE-2010-1634 (CVE-2010-2089).

Packages for 2008.0 and 2009.0 are provided as of the Extended
Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490

The updated packages have been patched to correct these issues.

Updated packages

2009.0 x86_64

 f22f06db4cc4e8f431aadeaa552f0891  2009.0/x86_64/lib64python2.5-2.5.2-5.6mdv2009.0.x86_64.rpm
 a15984e4b2e6821789ba36760aa08a79  2009.0/x86_64/lib64python2.5-devel-2.5.2-5.6mdv2009.0.x86_64.rpm
 329f34c1eb9cbf68805edcbb0efda8a2  2009.0/x86_64/python-2.5.2-5.6mdv2009.0.x86_64.rpm
 5404e1caa073784bbcb6aab8dff592bf  2009.0/x86_64/python-base-2.5.2-5.6mdv2009.0.x86_64.rpm
 59e2bbd0517468929db90ad4e9448dc7  2009.0/x86_64/python-docs-2.5.2-5.6mdv2009.0.x86_64.rpm
 b9821ba18b02ad9ae3b5831ac4893fee  2009.0/x86_64/tkinter-2.5.2-5.6mdv2009.0.x86_64.rpm
 3593d6bdf3fbc698301edee3d0906e58  2009.0/x86_64/tkinter-apps-2.5.2-5.6mdv2009.0.x86_64.rpm 
 a6602a71f4573ecb82951a861165fee8  2009.0/SRPMS/python-2.5.2-5.6mdv2009.0.src.rpm

MES5 i586

 28d975daaf5f623144e20493dd451745  mes5/i586/libpython2.5-2.5.2-5.7mdvmes5.1.i586.rpm
 2aff847d8b904ded1e3af26f2104959c  mes5/i586/libpython2.5-devel-2.5.2-5.7mdvmes5.1.i586.rpm
 7453da455746ae242478602e28f8ad54  mes5/i586/python-2.5.2-5.7mdvmes5.1.i586.rpm
 50ef79c0fe2a2ddb0768e9e42cd1a78d  mes5/i586/python-base-2.5.2-5.7mdvmes5.1.i586.rpm
 eaba93ba9f5a77fdcd23b199c81ecf10  mes5/i586/python-docs-2.5.2-5.7mdvmes5.1.i586.rpm
 6c0014be0c8647ac1c0ad4e6a5d48c92  mes5/i586/tkinter-2.5.2-5.7mdvmes5.1.i586.rpm
 78fe0ba52d451894a19be61b1b41a8f7  mes5/i586/tkinter-apps-2.5.2-5.7mdvmes5.1.i586.rpm 
 49d1708b056d60fb851ce89033d84224  mes5/SRPMS/python-2.5.2-5.7mdvmes5.1.src.rpm

2010.1 i586

 77685502f90b113db3ba22822b3cf9fc  2010.1/i586/libpython2.6-2.6.5-2.1mdv2010.1.i586.rpm
 bf9e3d224cf0059ec9344b034ec077af  2010.1/i586/libpython2.6-devel-2.6.5-2.1mdv2010.1.i586.rpm
 5d7158a82859935be01a4be3d9ab13d8  2010.1/i586/python-2.6.5-2.1mdv2010.1.i586.rpm
 b6a754e44856a2f3cef1c27cda7607d6  2010.1/i586/python-docs-2.6.5-2.1mdv2010.1.i586.rpm
 0f4fa85de1e74e999e32231d09a9a8f2  2010.1/i586/tkinter-2.6.5-2.1mdv2010.1.i586.rpm
 dca56ed98ff41e72884d1f0d06d77f40  2010.1/i586/tkinter-apps-2.6.5-2.1mdv2010.1.i586.rpm 
 107556cf0daafd475511abb2b598b7e3  2010.1/SRPMS/python-2.6.5-2.1mdv2010.1.src.rpm

2010.0 x86_64

 213ec645079b9cf5e32898fcbfc28fad  2010.0/x86_64/lib64python2.6-2.6.4-1.3mdv2010.0.x86_64.rpm
 37b43ce708c77e503c1f93b26a168605  2010.0/x86_64/lib64python2.6-devel-2.6.4-1.3mdv2010.0.x86_64.rpm
 9a3a70fe1762ee70dbc8262ee662c39b  2010.0/x86_64/python-2.6.4-1.3mdv2010.0.x86_64.rpm
 ded2b20c7d903a2294425222d5e9ca62  2010.0/x86_64/python-docs-2.6.4-1.3mdv2010.0.x86_64.rpm
 0be4dcaea55b6c0b7e6876d62ec7e7b6  2010.0/x86_64/tkinter-2.6.4-1.3mdv2010.0.x86_64.rpm
 cee4059bb748ee05150955eb4e2167f6  2010.0/x86_64/tkinter-apps-2.6.4-1.3mdv2010.0.x86_64.rpm 
 b8341a9e215e7986ff904d7fdf74804c  2010.0/SRPMS/python-2.6.4-1.3mdv2010.0.src.rpm

2010.0 i586

 5f0ff97a0a93f7dd724156b4c75a189f  2010.0/i586/libpython2.6-2.6.4-1.3mdv2010.0.i586.rpm
 ed6881e0fbf01066dfd29ce5b415931c  2010.0/i586/libpython2.6-devel-2.6.4-1.3mdv2010.0.i586.rpm
 3324fa6ce72997b71417b7425e3c8caf  2010.0/i586/python-2.6.4-1.3mdv2010.0.i586.rpm
 6d842db0d14e29b1c007b99b78926e5d  2010.0/i586/python-docs-2.6.4-1.3mdv2010.0.i586.rpm
 bd34f1e94486390acff010381d08da03  2010.0/i586/tkinter-2.6.4-1.3mdv2010.0.i586.rpm
 02521a044b36eb44ef9854f38b83364a  2010.0/i586/tkinter-apps-2.6.4-1.3mdv2010.0.i586.rpm 
 b8341a9e215e7986ff904d7fdf74804c  2010.0/SRPMS/python-2.6.4-1.3mdv2010.0.src.rpm

2009.1 i586

 3404f9ddf0f432a2ba81e78ce0408fd8  2009.1/i586/libpython2.6-2.6.1-6.4mdv2009.1.i586.rpm
 1642bfa7d7c8c2979f80491cd592447b  2009.1/i586/libpython2.6-devel-2.6.1-6.4mdv2009.1.i586.rpm
 e32c4080ae403710eb91bf8508430ecb  2009.1/i586/python-2.6.1-6.4mdv2009.1.i586.rpm
 f8221639b02160a28dc7c96d48050195  2009.1/i586/python-docs-2.6.1-6.4mdv2009.1.i586.rpm
 d1488967010eb649113916a3eef85213  2009.1/i586/tkinter-2.6.1-6.4mdv2009.1.i586.rpm
 c6c3a71a9efa1b8f010027a6d1418fa6  2009.1/i586/tkinter-apps-2.6.1-6.4mdv2009.1.i586.rpm 
 08fb9cd480e9a5ffa2efe603c17b0e71  2009.1/SRPMS/python-2.6.1-6.4mdv2009.1.src.rpm

2009.0 i586

 598630ce234cff98465351b4af90d664  2009.0/i586/libpython2.5-2.5.2-5.6mdv2009.0.i586.rpm
 44a691ffb51a47dd653fbf03d5a9be00  2009.0/i586/libpython2.5-devel-2.5.2-5.6mdv2009.0.i586.rpm
 ea55908df10ad9e82a5d361612bcbca7  2009.0/i586/python-2.5.2-5.6mdv2009.0.i586.rpm
 cb25c56f6f68e0bb036cd1be0360595d  2009.0/i586/python-base-2.5.2-5.6mdv2009.0.i586.rpm
 0161f8c43b4fbf019ef24a72760d3113  2009.0/i586/python-docs-2.5.2-5.6mdv2009.0.i586.rpm
 987651d11ca710910a89e52330873187  2009.0/i586/tkinter-2.5.2-5.6mdv2009.0.i586.rpm
 a73ba0fa7adcb1ebe2806335e575e8b2  2009.0/i586/tkinter-apps-2.5.2-5.6mdv2009.0.i586.rpm 
 a6602a71f4573ecb82951a861165fee8  2009.0/SRPMS/python-2.5.2-5.6mdv2009.0.src.rpm

CS4.0 i586

 24663decfe6c6ba75771371777834d6a  corporate/4.0/i586/libpython2.4-2.4.5-0.6.20060mlcs4.i586.rpm
 2d362036a85055bcae84aa30e320425b  corporate/4.0/i586/libpython2.4-devel-2.4.5-0.6.20060mlcs4.i586.rpm
 07a94afed3c78c4e071197ba7dba676b  corporate/4.0/i586/python-2.4.5-0.6.20060mlcs4.i586.rpm
 b46bc657628e0790dc68c0298d0fa8c2  corporate/4.0/i586/python-base-2.4.5-0.6.20060mlcs4.i586.rpm
 00fea68fc4a04885a56d4979dbcd4805  corporate/4.0/i586/python-docs-2.4.5-0.6.20060mlcs4.i586.rpm
 e7f1dd4a85e67c89d9053bbd5a0dcb1d  corporate/4.0/i586/tkinter-2.4.5-0.6.20060mlcs4.i586.rpm 
 2bd3365c9ce6ef9caf80b7824e5cdba2  corporate/4.0/SRPMS/python-2.4.5-0.6.20060mlcs4.src.rpm

2008.0 x86_64

 5f9e4e0e27dfa80a7fa2bf62998edf25  2008.0/x86_64/lib64python2.5-2.5.2-2.7mdv2008.0.x86_64.rpm
 36bfe236a350a8e9a0e2657eefadd299  2008.0/x86_64/lib64python2.5-devel-2.5.2-2.7mdv2008.0.x86_64.rpm
 c03cc44dac5ecdf49d7bf2ca5ad5477a  2008.0/x86_64/python-2.5.2-2.7mdv2008.0.x86_64.rpm
 1965d6962b5cfe7349f4369bceda2ce4  2008.0/x86_64/python-base-2.5.2-2.7mdv2008.0.x86_64.rpm
 e13c770d7ddcc045251733d69865a3ae  2008.0/x86_64/python-docs-2.5.2-2.7mdv2008.0.x86_64.rpm
 cff8d5ef80f29b2f9e32e171420ede11  2008.0/x86_64/tkinter-2.5.2-2.7mdv2008.0.x86_64.rpm
 e8d3db4327d427c9451bf604e5cd1bb7  2008.0/x86_64/tkinter-apps-2.5.2-2.7mdv2008.0.x86_64.rpm 
 211a673f3cd2e1b7d153d6f40291ad86  2008.0/SRPMS/python-2.5.2-2.7mdv2008.0.src.rpm

CS4.0 x86_64

 6a321e2d0675667c4a20ca9eef9e659f  corporate/4.0/x86_64/lib64python2.4-2.4.5-0.6.20060mlcs4.x86_64.rpm
 c4747b33200becebdf06b999233d2d85  corporate/4.0/x86_64/lib64python2.4-devel-2.4.5-0.6.20060mlcs4.x86_64.rpm
 f0e7f6603385328327f62613820d09ad  corporate/4.0/x86_64/python-2.4.5-0.6.20060mlcs4.x86_64.rpm
 fab004a4528c0ea88257c28f68767232  corporate/4.0/x86_64/python-base-2.4.5-0.6.20060mlcs4.x86_64.rpm
 949f7e382bebc814c821d619abfd5d57  corporate/4.0/x86_64/python-docs-2.4.5-0.6.20060mlcs4.x86_64.rpm
 f61e8d55e2a2be3c0dc62903fce980d5  corporate/4.0/x86_64/tkinter-2.4.5-0.6.20060mlcs4.x86_64.rpm 
 2bd3365c9ce6ef9caf80b7824e5cdba2  corporate/4.0/SRPMS/python-2.4.5-0.6.20060mlcs4.src.rpm

2008.0 i586

 4f913679ea6f154f0d7c84c8bafd3fe3  2008.0/i586/libpython2.5-2.5.2-2.7mdv2008.0.i586.rpm
 dfab01f9210fa284ad3b4dd271bfb3dd  2008.0/i586/libpython2.5-devel-2.5.2-2.7mdv2008.0.i586.rpm
 b6245a9dc5423d14ba96f4f388dd0fe6  2008.0/i586/python-2.5.2-2.7mdv2008.0.i586.rpm
 15c39b51c66cc78aec157eaed0267a7b  2008.0/i586/python-base-2.5.2-2.7mdv2008.0.i586.rpm
 e38a9894712bf82a8dcc1eee1265592c  2008.0/i586/python-docs-2.5.2-2.7mdv2008.0.i586.rpm
 2f2100e6dd35a4aef8e503394a723e81  2008.0/i586/tkinter-2.5.2-2.7mdv2008.0.i586.rpm
 29b96d4b84a7241fc78f55671f1a33f0  2008.0/i586/tkinter-apps-2.5.2-2.7mdv2008.0.i586.rpm 
 211a673f3cd2e1b7d153d6f40291ad86  2008.0/SRPMS/python-2.5.2-2.7mdv2008.0.src.rpm

2009.1 x86_64

 363de5386b3df783c2d599295b6c9fd9  2009.1/x86_64/lib64python2.6-2.6.1-6.4mdv2009.1.x86_64.rpm
 f09af1e423ba5755b7b0b524d0a4fada  2009.1/x86_64/lib64python2.6-devel-2.6.1-6.4mdv2009.1.x86_64.rpm
 ce6deed593b82a1b973de15001f79362  2009.1/x86_64/python-2.6.1-6.4mdv2009.1.x86_64.rpm
 a58bbe02634432f582b8b433287863e5  2009.1/x86_64/python-docs-2.6.1-6.4mdv2009.1.x86_64.rpm
 35868acab80516ebb52b08feeff616bb  2009.1/x86_64/tkinter-2.6.1-6.4mdv2009.1.x86_64.rpm
 ccb5413b65fd391a8d0fa553ec28b513  2009.1/x86_64/tkinter-apps-2.6.1-6.4mdv2009.1.x86_64.rpm 
 08fb9cd480e9a5ffa2efe603c17b0e71  2009.1/SRPMS/python-2.6.1-6.4mdv2009.1.src.rpm

MES5 x86_64

 ad5c6abd37cd342183f540370bbbb03b  mes5/x86_64/lib64python2.5-2.5.2-5.7mdvmes5.1.x86_64.rpm
 2722a15a452703ff5b5ef6d6542e56d3  mes5/x86_64/lib64python2.5-devel-2.5.2-5.7mdvmes5.1.x86_64.rpm
 2cac9f75b9cb85182e8a420329dfaccd  mes5/x86_64/python-2.5.2-5.7mdvmes5.1.x86_64.rpm
 e04fdf9d4f629dd51b3bb27e22e4a152  mes5/x86_64/python-base-2.5.2-5.7mdvmes5.1.x86_64.rpm
 77b9ee5a5be480ce55eccee414c0f4d5  mes5/x86_64/python-docs-2.5.2-5.7mdvmes5.1.x86_64.rpm
 8de9bb41acd3ed981b9b44dbf7d139a5  mes5/x86_64/tkinter-2.5.2-5.7mdvmes5.1.x86_64.rpm
 6d1a1b1173907b8602d7ca0ad71bc537  mes5/x86_64/tkinter-apps-2.5.2-5.7mdvmes5.1.x86_64.rpm 
 49d1708b056d60fb851ce89033d84224  mes5/SRPMS/python-2.5.2-5.7mdvmes5.1.src.rpm

2010.1 x86_64

 14bcbf073fc47d3a423c6fefe15b5939  2010.1/x86_64/lib64python2.6-2.6.5-2.1mdv2010.1.x86_64.rpm
 9acea2705dc72a6ad717fbcd961db368  2010.1/x86_64/lib64python2.6-devel-2.6.5-2.1mdv2010.1.x86_64.rpm
 3e2047db297a58cef19bd3a22bab1953  2010.1/x86_64/python-2.6.5-2.1mdv2010.1.x86_64.rpm
 618c9b3e812d73ae236a409ce1453a89  2010.1/x86_64/python-docs-2.6.5-2.1mdv2010.1.x86_64.rpm
 8ad00fe7d002305ac26ff720ca3fc3ff  2010.1/x86_64/tkinter-2.6.5-2.1mdv2010.1.x86_64.rpm
 3a8fdef37c200ca7b74f7e263dbaf04b  2010.1/x86_64/tkinter-apps-2.6.5-2.1mdv2010.1.x86_64.rpm 
 107556cf0daafd475511abb2b598b7e3  2010.1/SRPMS/python-2.6.5-2.1mdv2010.1.src.rpm

References