python-2.6.6-64.0.1.AXS4

エラータID: AXSA:2015-418:02

Release date: 
Thursday, August 13, 2015 - 19:48
Subject: 
python-2.6.6-64.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

Coherence is a framework written in Python enabling applications to participate
in digital living networks, such as the UPnP universe.

Security issues fixed with this release:

CVE-2013-1752
CVE-2014-1912
CVE-2014-4650
CVE-2014-7185

Fixed bugs:

* These updated python packages also include numerous bug fixes and enhancements.

Solution: 

Update packages.

CVEs: 
CVE-2013-1752
** REJECT ** Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions.
CVE-2014-1912
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
CVE-2014-4650
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2014-7185
Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.
Additional Info: 

N/A

Download: 

SRPMS
  1. python-2.6.6-64.0.1.AXS4.src.rpm
    MD5: ddc0cd680e53267a245c2a17b6a3c949
    SHA-256: 7dead8ae0adb8f19d3f4cfe9fd4c9f58516542c3e0d9d58b05a6bfbca9472564
    Size: 10.75 MB

Asianux Server 4 for x86
  1. python-2.6.6-64.0.1.AXS4.i686.rpm
    MD5: 548626ac1404e3ea1731bfeb0e9f35fa
    SHA-256: 23cda6ff849fc5a57e33c922d2f9f0ce565971d069ac8be2cf874b80e95e876c
    Size: 75.27 kB
  2. python-devel-2.6.6-64.0.1.AXS4.i686.rpm
    MD5: 5d5c08640cc1c0adcb3506fab4e31361
    SHA-256: 6c61bd946e96cac9762f6f24bf87ee4c7b127c1b71d99fb519a6c14af4b05492
    Size: 172.09 kB
  3. python-libs-2.6.6-64.0.1.AXS4.i686.rpm
    MD5: 7dc2586f88372c3e783ae969a9061830
    SHA-256: 9307ef0582548fc9619dc46dd61b5a6b3b3ce7dedb28a9909a6afa1bb39de583
    Size: 5.29 MB
  4. tkinter-2.6.6-64.0.1.AXS4.i686.rpm
    MD5: 2dc9b369852e0e7ce1e97755045be367
    SHA-256: 3cf97cd69bdcd4273ea7015055337e383193a282752b2975d055d87d19ac3161
    Size: 255.70 kB

Asianux Server 4 for x86_64
  1. python-2.6.6-64.0.1.AXS4.x86_64.rpm
    MD5: f649f2f620ce6441c40aad28576c3616
    SHA-256: cf1e4b287e72ac5038ab6f0235b718bbd0877f3f1ee9d323383d267a83874a9a
    Size: 74.89 kB
  2. python-devel-2.6.6-64.0.1.AXS4.x86_64.rpm
    MD5: 6efb99b1274b33d013693dfa0565db01
    SHA-256: 2b115285e675ee98d4ff9e20bc52876d7772caa96af79dcba3135310571a9b58
    Size: 171.52 kB
  3. python-libs-2.6.6-64.0.1.AXS4.x86_64.rpm
    MD5: 47788ea4c3d3fd647446578f3b63b778
    SHA-256: 1ac58f9e1022191686ee171242338bfa1b0cc3c25e01425308027e63d8868506
    Size: 5.33 MB
  4. tkinter-2.6.6-64.0.1.AXS4.x86_64.rpm
    MD5: cec84a871d14fe78818192d5f0cfbad0
    SHA-256: 26c1bded1fc00028795dd225b646f3ab6ac83cea22157cba21f6e1efe73b96a1
    Size: 256.32 kB