Lucene search

K
osvGoogleOSV:DSA-1667-1
HistoryNov 19, 2008 - 12:00 a.m.

python2.4 - several vulnerabilities

2008-11-1900:00:00
Google
osv.dev
6

0.011 Low

EPSS

Percentile

84.9%

Several vulnerabilities have been discovered in the interpreter for the
Python language. The Common Vulnerabilities and Exposures project
identifies the following problems:

  • CVE-2008-2315
    David Remahl discovered several integer overflows in the
    stringobject, unicodeobject, bufferobject, longobject,
    tupleobject, stropmodule, gcmodule, and mmapmodule modules.
  • CVE-2008-3142
    Justin Ferguson discovered that incorrect memory allocation in
    the unicode_resize() function can lead to buffer overflows.
  • CVE-2008-3143
    Several integer overflows were discovered in various Python core
    modules.
  • CVE-2008-3144
    Several integer overflows were discovered in the PyOS_vsnprintf()
    function.

For the stable distribution (etch), these problems have been fixed in
version 2.4.4-3+etch2.

For the unstable distribution (sid) and the upcoming stable
distribution (lenny), these problems have been fixed in
version 2.4.5-5.

We recommend that you upgrade your python2.4 packages.

CPENameOperatorVersion
python2.4eq2.4.4-3
python2.4eq2.4.4-3+etch1