ELSA-2009-1178

ELSA-2009-1178 - python security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2009-07-27

Description

[2.2.3-6.11]
- Fix all of the low priority security bugs:
- Resolves: rhbz#486114
- Multiple integer overflows in python core (CVE-2008-2315)
- Resolves: 455008
- PyString_FromStringAndSize does not check for negative size values (CVE-2008-1887)
- Resolves: 443810
- Multiple integer overflows discovered by Google (CVE-2008-3143)
- Resolves: 455013
- Multiple buffer overflows in unicode processing (CVE-2008-3142)
- Resolves: 454990
- Potential integer underflow and overflow in the PyOS_vsnprintf C API function (CVE-2008-3144)
- Resolves: 455018
- imageop module multiple integer overflows (CVE-2008-4864)
- Resolves: 469656
- stringobject, unicodeobject integer overflows (CVE-2008-5031)
- Resolves: 470915
- imageop module integer overflows (CVE-2008-1679)
- CVE-2008-1679 patch is part of python-2.2.3-CVE-2008-4864-imageop-1.patch
- Resolves: 441306

Related CVEs

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 3 (i386)	python-2.2.3-6.11.src.rpm	2f00f8b7014784da0f8f57d594f9c7dbc58cb1b94cb31200dfc3528f39c6ca9b	-	el3_i386_latest
	python-2.2.3-6.11.src.rpm	2f00f8b7014784da0f8f57d594f9c7dbc58cb1b94cb31200dfc3528f39c6ca9b	-	el3_u9_i386_patch
	python-2.2.3-6.11.i386.rpm	4f4a118609465c500bb23305478d8a31d84e9996ecfd56134c8b8d2336cc816f	-	el3_i386_latest
	python-2.2.3-6.11.i386.rpm	4f4a118609465c500bb23305478d8a31d84e9996ecfd56134c8b8d2336cc816f	-	el3_u9_i386_patch
	python-devel-2.2.3-6.11.i386.rpm	35db6408126aa2b722144e356636c86501f953b3d9633c209ed0c70632c95b53	-	el3_i386_latest
	python-devel-2.2.3-6.11.i386.rpm	35db6408126aa2b722144e356636c86501f953b3d9633c209ed0c70632c95b53	-	el3_u9_i386_patch
	python-tools-2.2.3-6.11.i386.rpm	40e0561e9b67301d9454a572139039c05a0aaa1fb6fa410b09fc2f79b472ec43	-	el3_i386_latest
	python-tools-2.2.3-6.11.i386.rpm	40e0561e9b67301d9454a572139039c05a0aaa1fb6fa410b09fc2f79b472ec43	-	el3_u9_i386_patch
	tkinter-2.2.3-6.11.i386.rpm	96d0c32bb2752716d0d090ea9babbb7ac007307248329a9a007c7b8873892d78	-	el3_i386_latest
	tkinter-2.2.3-6.11.i386.rpm	96d0c32bb2752716d0d090ea9babbb7ac007307248329a9a007c7b8873892d78	-	el3_u9_i386_patch
Oracle Linux 3 (x86_64)	python-2.2.3-6.11.src.rpm	2f00f8b7014784da0f8f57d594f9c7dbc58cb1b94cb31200dfc3528f39c6ca9b	-	el3_u9_x86_64_patch
	python-2.2.3-6.11.src.rpm	2f00f8b7014784da0f8f57d594f9c7dbc58cb1b94cb31200dfc3528f39c6ca9b	-	el3_x86_64_latest
	python-2.2.3-6.11.x86_64.rpm	978565b6e1eebdc77815a28967f91cc4eedd21de6aa4a006ae1561f2b7b6c6ad	-	el3_u9_x86_64_patch
	python-2.2.3-6.11.x86_64.rpm	978565b6e1eebdc77815a28967f91cc4eedd21de6aa4a006ae1561f2b7b6c6ad	-	el3_x86_64_latest
	python-devel-2.2.3-6.11.x86_64.rpm	d77a48250ed9a897150ae173ab294241db9a8df89545bc4c08f98b71d4bdd831	-	el3_u9_x86_64_patch
	python-devel-2.2.3-6.11.x86_64.rpm	d77a48250ed9a897150ae173ab294241db9a8df89545bc4c08f98b71d4bdd831	-	el3_x86_64_latest
	python-tools-2.2.3-6.11.x86_64.rpm	55dbcb2cedb3e45eff46dedda53748cee8a706c8bb827c793081171f35a1d884	-	el3_u9_x86_64_patch
	python-tools-2.2.3-6.11.x86_64.rpm	55dbcb2cedb3e45eff46dedda53748cee8a706c8bb827c793081171f35a1d884	-	el3_x86_64_latest
	tkinter-2.2.3-6.11.x86_64.rpm	ee830a84e12c81fb4b4295fe8478571a1084a28e623fe0aa809ff607fdf62840	-	el3_u9_x86_64_patch
	tkinter-2.2.3-6.11.x86_64.rpm	ee830a84e12c81fb4b4295fe8478571a1084a28e623fe0aa809ff607fdf62840	-	el3_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team