Mandriva- Advisories MDVSA-2008:012: Updated python packages fix vulnerabilities

[Mandriva]

Advisories MDVSA-2008:012: Updated python packages fix vulnerabilities
An integer overflow flaw was discovered in how python's pcre module
handled certain regular expressions. If a python application using the
pcre module were to compile and execute untrusted regular expressions,
it could possibly lead to an application crash or the excution
of arbitrary code with the privileges of the python interpreter
(CVE-2006-7228).

Multiple integer overflows were found in python's imageop module.
If an application written in python used the imageop module to
process untrusted images, it could cause the application to crash,
enter an infinite loop, or possibly execute arbitrary code with the
privileges of the python interpreter (CVE-2007-4965).

The updated packages have been patched to correct these issues.
http://mandrivausers.org/index.php?showtopic=47254
http://mandrivausers.org/index.php?showtopic=47254
Mon, 14 Jan 2008 23:50:14 +0000