ELSA-2009-1176

ELSA-2009-1176 - python security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2009-07-27

Description

[2.4.3-24.el5_3.6]
- Fix all of the low priority security bugs:
- Resolves: rhbz#486351
- Multiple integer overflows in python core (CVE-2008-2315)
- Resolves: 455008
- PyString_FromStringAndSize does not check for negative size values (CVE-2008-1887)
- Resolves: 443810
- Multiple integer overflows discovered by Google (CVE-2008-3143)
- Resolves: 455013
- Multiple buffer overflows in unicode processing (CVE-2008-3142)
- Resolves: 454990
- Potential integer underflow and overflow in the PyOS_vsnprintf C API function (CVE-2008-3144)
- Resolves: 455018
- imageop module multiple integer overflows (CVE-2008-4864)
- Resolves: 469656
- stringobject, unicodeobject integer overflows (CVE-2008-5031)
- Resolves: 470915
- integer signedness error in the zlib extension module (CVE-2008-1721)
- Resolves: 442005
- off-by-one locale.strxfrm() (possible memory disclosure) (CVE-2007-2052)
- Resolves: 235093
- imageop module heap corruption (CVE-2007-4965)
- Resolves: 295971

Related CVEs

CVE-2007-2052

CVE-2007-4965

CVE-2008-1721

CVE-2008-1887

CVE-2008-2315

CVE-2008-3142

CVE-2008-3143

CVE-2008-3144

CVE-2008-4864

CVE-2008-5031

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	python-2.4.3-24.el5_3.6.src.rpm	5a95bdf1f6e515231130e5504c98b8de	ELSA-2012-0745
	python-2.4.3-24.el5_3.6.i386.rpm	e603f5a9ef8e22c29323e991bad0afff	ELSA-2012-0745
	python-devel-2.4.3-24.el5_3.6.i386.rpm	64fa9cbe1aa1ebe8cf1408ad72f2f6eb	ELSA-2012-0745
	python-tools-2.4.3-24.el5_3.6.i386.rpm	c4b99d398ac2cb4eef7ba395b3c08dd4	ELSA-2012-0745
	tkinter-2.4.3-24.el5_3.6.i386.rpm	6d6bb301f17463fda1e1c0b37eda32f6	ELSA-2012-0745
Oracle Linux 5 (x86_64)	python-2.4.3-24.el5_3.6.src.rpm	5a95bdf1f6e515231130e5504c98b8de	ELSA-2012-0745
	python-2.4.3-24.el5_3.6.x86_64.rpm	04d86b6b7e6a405a50cf7006d94bf19d	ELSA-2012-0745
	python-devel-2.4.3-24.el5_3.6.i386.rpm	64fa9cbe1aa1ebe8cf1408ad72f2f6eb	ELSA-2012-0745
	python-devel-2.4.3-24.el5_3.6.x86_64.rpm	c54ba5e0063387d2eb10f81da9757c2d	ELSA-2012-0745
	python-tools-2.4.3-24.el5_3.6.x86_64.rpm	cf050b35662b8cfd7f70174441751657	ELSA-2012-0745
	tkinter-2.4.3-24.el5_3.6.x86_64.rpm	041d6db7d1fb135ed8aaa6923f56a5a6	ELSA-2012-0745

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team