ELSA-2009-1177

ELSA-2009-1177 - python security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2009-07-27

Description

[2.3.4-14.7.el4_8.2]
- Fix all of the low priority security bugs:
- Resolves: rhbz#486329
- Multiple integer overflows in python core (CVE-2008-2315)
- Resolves: 455008
- PyString_FromStringAndSize does not check for negative size values (CVE-2008-1887)
- Resolves: 443810
- Multiple integer overflows discovered by Google (CVE-2008-3143)
- Resolves: 455013
- Multiple buffer overflows in unicode processing (CVE-2008-3142)
- Resolves: 454990
- Potential integer underflow and overflow in the PyOS_vsnprintf C API function (CVE-2008-3144)
- Resolves: 455018
- imageop module multiple integer overflows (CVE-2008-4864)
- Resolves: 469656
- stringobject, unicodeobject integer overflows (CVE-2008-5031)
- Resolves: 470915
- integer signedness error in the zlib extension module (CVE-2008-1721)
- Resolves: 442005
- imageop module integer overflows (CVE-2008-1679)
- CVE-2008-1679 patch is part of python-2.3.4-CVE-2008-4864-imageop-{1,2}.patch
- Resolves: 441306

Related CVEs

CVE-2008-1721

CVE-2008-1887

CVE-2008-2315

CVE-2008-3142

CVE-2008-3143

CVE-2008-3144

CVE-2008-4864

CVE-2008-5031

CVE-2008-1679

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 4 (i386)	python-2.3.4-14.7.el4_8.2.src.rpm	2fa2f469eb4c98c126df8c7586d610aa	ELSA-2011-0491
	python-2.3.4-14.7.el4_8.2.i386.rpm	7b4cc3b81e8918f3502667c4cd8b57d7	ELSA-2011-0491
	python-devel-2.3.4-14.7.el4_8.2.i386.rpm	fd1a25015185d213b14ec42b3d5dce91	ELSA-2011-0491
	python-docs-2.3.4-14.7.el4_8.2.i386.rpm	9ab8d331b1bd95835bb910578770d24a	ELSA-2011-0491
	python-tools-2.3.4-14.7.el4_8.2.i386.rpm	b49cf40607431d74bfab4bcc490f7144	ELSA-2011-0491
	tkinter-2.3.4-14.7.el4_8.2.i386.rpm	f054649892da79815c0fd4d2a62e8cfa	ELSA-2011-0491
Oracle Linux 4 (ia64)	python-2.3.4-14.7.el4_8.2.src.rpm	2fa2f469eb4c98c126df8c7586d610aa	ELSA-2011-0491
	python-2.3.4-14.7.el4_8.2.ia64.rpm	6650d1b1e4adbc197e53961fc732a804	ELSA-2011-0491
	python-devel-2.3.4-14.7.el4_8.2.ia64.rpm	d03c5ee86b34972aea423e5073a9f363	ELSA-2011-0491
	python-docs-2.3.4-14.7.el4_8.2.ia64.rpm	9d574e4b753a365de5f900ca20a54405	ELSA-2011-0491
	python-tools-2.3.4-14.7.el4_8.2.ia64.rpm	055709d9d57d4b49ee7eadd6d2ca489a	ELSA-2011-0491
	tkinter-2.3.4-14.7.el4_8.2.ia64.rpm	b5ffef4eab15137acf2c9ea4e67cbd40	ELSA-2011-0491
Oracle Linux 4 (x86_64)	python-2.3.4-14.7.el4_8.2.src.rpm	2fa2f469eb4c98c126df8c7586d610aa	ELSA-2011-0491
	python-2.3.4-14.7.el4_8.2.x86_64.rpm	a814f1daffcbb910f91b0e98ad661885	ELSA-2011-0491
	python-devel-2.3.4-14.7.el4_8.2.x86_64.rpm	969aaf4294cfec061467fb1bbcdbdea4	ELSA-2011-0491
	python-docs-2.3.4-14.7.el4_8.2.x86_64.rpm	677b32969fe16b9141f77e0d6a487fa8	ELSA-2011-0491
	python-tools-2.3.4-14.7.el4_8.2.x86_64.rpm	5ecdd56ccc825f3242366a0918d7cdff	ELSA-2011-0491
	tkinter-2.3.4-14.7.el4_8.2.x86_64.rpm	457fd5bd2149e1555a8a7439c9847846	ELSA-2011-0491

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team