-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2009:212 http://www.mandriva.com/security/ _______________________________________________________________________ Package : python Date : August 23, 2009 Affected: 2008.1, 2009.0, 2009.1, Corporate 3.0, Corporate 4.0, Enterprise Server 5.0, Multi Network Firewall 2.0 _______________________________________________________________________ Problem Description: A vulnerability was found in xmltok_impl.c (expat) that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625. This update fixes this vulnerability. _______________________________________________________________________ References: https://bugs.gentoo.org/show_bug.cgi?id=280615 _______________________________________________________________________ Updated Packages: Mandriva Linux 2008.1: 836ae8dca4ea5075570308601404f08b 2008.1/i586/libpython2.5-2.5.2-2.4mdv2008.1.i586.rpm c0d2f284c5186fbeffbec54c87c3b16e 2008.1/i586/libpython2.5-devel-2.5.2-2.4mdv2008.1.i586.rpm 9dc6194d0725d98de504d43a6a6be8ee 2008.1/i586/python-2.5.2-2.4mdv2008.1.i586.rpm ff9365c549641ceb5220b95ed839c5a1 2008.1/i586/python-base-2.5.2-2.4mdv2008.1.i586.rpm eaa3f8eb68cb602d4844e49e243ca9cf 2008.1/i586/python-docs-2.5.2-2.4mdv2008.1.i586.rpm 3111537c56613f5597c57a524ed1636b 2008.1/i586/tkinter-2.5.2-2.4mdv2008.1.i586.rpm c1ada1cf0e66f5108f43c72fb9955f72 2008.1/i586/tkinter-apps-2.5.2-2.4mdv2008.1.i586.rpm 7c3531beccdeba86834ab34353b0b63a 2008.1/SRPMS/python-2.5.2-2.4mdv2008.1.src.rpm Mandriva Linux 2008.1/X86_64: 5167564837a0738bbd75a291aff5f9ae 2008.1/x86_64/lib64python2.5-2.5.2-2.4mdv2008.1.x86_64.rpm 39ad271ea137fd9fe5fb7ae6463cd5ed 2008.1/x86_64/lib64python2.5-devel-2.5.2-2.4mdv2008.1.x86_64.rpm 8a3da29b65af4b47d7e6fd71b466b23a 2008.1/x86_64/python-2.5.2-2.4mdv2008.1.x86_64.rpm 48bbff9fdaa65b079be904c4b0605235 2008.1/x86_64/python-base-2.5.2-2.4mdv2008.1.x86_64.rpm f0013decf0a71de2b9d170cffeb4aaf4 2008.1/x86_64/python-docs-2.5.2-2.4mdv2008.1.x86_64.rpm b6503232d22add8000aa5492304299f5 2008.1/x86_64/tkinter-2.5.2-2.4mdv2008.1.x86_64.rpm 90bbc302ae26762062d3e8580765527e 2008.1/x86_64/tkinter-apps-2.5.2-2.4mdv2008.1.x86_64.rpm 7c3531beccdeba86834ab34353b0b63a 2008.1/SRPMS/python-2.5.2-2.4mdv2008.1.src.rpm Mandriva Linux 2009.0: 41a6ff3352ec97287c6ab70e3bb8d2d7 2009.0/i586/libpython2.5-2.5.2-5.3mdv2009.0.i586.rpm 98a906e1203d5b5ca68c45880ed50792 2009.0/i586/libpython2.5-devel-2.5.2-5.3mdv2009.0.i586.rpm 79c828581618bd5595357ee6ff11eb46 2009.0/i586/python-2.5.2-5.3mdv2009.0.i586.rpm ecec77d205b6cb0b573f480cf2ecf416 2009.0/i586/python-base-2.5.2-5.3mdv2009.0.i586.rpm d7e0cba3770581d0ac3a553c85587f74 2009.0/i586/python-docs-2.5.2-5.3mdv2009.0.i586.rpm 39a114e0cffa3e7606cee245c3daa83a 2009.0/i586/tkinter-2.5.2-5.3mdv2009.0.i586.rpm cb9c6dccfda79b7928535f9530554145 2009.0/i586/tkinter-apps-2.5.2-5.3mdv2009.0.i586.rpm 838505a65e7170253df7dd2c6bb2ce29 2009.0/SRPMS/python-2.5.2-5.3mdv2009.0.src.rpm Mandriva Linux 2009.0/X86_64: cef3bdd63b557ac45c7fc1caeb7f93fb 2009.0/x86_64/lib64python2.5-2.5.2-5.3mdv2009.0.x86_64.rpm 494082f968c548878504954486de0472 2009.0/x86_64/lib64python2.5-devel-2.5.2-5.3mdv2009.0.x86_64.rpm 53066eba413c19255bff2f96d09fd71b 2009.0/x86_64/python-2.5.2-5.3mdv2009.0.x86_64.rpm 4882e3b56af0ccff57d323b0e81a0c86 2009.0/x86_64/python-base-2.5.2-5.3mdv2009.0.x86_64.rpm 9589abe6325301c18e630da640696925 2009.0/x86_64/python-docs-2.5.2-5.3mdv2009.0.x86_64.rpm 8a34b93f61e1aedd03bd42e80936e702 2009.0/x86_64/tkinter-2.5.2-5.3mdv2009.0.x86_64.rpm aa5f5b193674a3566d599c48dd3bf198 2009.0/x86_64/tkinter-apps-2.5.2-5.3mdv2009.0.x86_64.rpm 838505a65e7170253df7dd2c6bb2ce29 2009.0/SRPMS/python-2.5.2-5.3mdv2009.0.src.rpm Mandriva Linux 2009.1: 698f1c4fe930e04180f90066303f208c 2009.1/i586/libpython2.6-2.6.1-6.1mdv2009.1.i586.rpm 95f44487a6858e974cf7a69e81c4da30 2009.1/i586/libpython2.6-devel-2.6.1-6.1mdv2009.1.i586.rpm f274ff8d9c684f958c792060c7d40377 2009.1/i586/python-2.6.1-6.1mdv2009.1.i586.rpm 80699827f57799ce3aa889cc96f1e370 2009.1/i586/python-docs-2.6.1-6.1mdv2009.1.i586.rpm 5377a66c3d6bb6cec81be0e75ca71f77 2009.1/i586/tkinter-2.6.1-6.1mdv2009.1.i586.rpm be48b1e249242a193a41fb6e1920b1dc 2009.1/i586/tkinter-apps-2.6.1-6.1mdv2009.1.i586.rpm 6b7c29642be5f8aa998fc4bd5f571f9e 2009.1/SRPMS/python-2.6.1-6.1mdv2009.1.src.rpm Mandriva Linux 2009.1/X86_64: 32ed19f4b67a2740dd78edffef5483ee 2009.1/x86_64/lib64python2.6-2.6.1-6.1mdv2009.1.x86_64.rpm f313d28183f7c0d69c37d5beaddc4e48 2009.1/x86_64/lib64python2.6-devel-2.6.1-6.1mdv2009.1.x86_64.rpm d066fecdbb264e9ba2534b7284724d75 2009.1/x86_64/python-2.6.1-6.1mdv2009.1.x86_64.rpm 9f08828ee1728ae00b1e356cc861b772 2009.1/x86_64/python-docs-2.6.1-6.1mdv2009.1.x86_64.rpm 833945b29fafdfd2dbab7495f101c5f7 2009.1/x86_64/tkinter-2.6.1-6.1mdv2009.1.x86_64.rpm 6f693f90697406427c09f8312ca2bd04 2009.1/x86_64/tkinter-apps-2.6.1-6.1mdv2009.1.x86_64.rpm 6b7c29642be5f8aa998fc4bd5f571f9e 2009.1/SRPMS/python-2.6.1-6.1mdv2009.1.src.rpm Corporate 3.0: 91e05c8b6f93cb16180aa4a843e765c2 corporate/3.0/i586/libpython2.3-2.3.7-0.3.C30mdk.i586.rpm d4ac68c7582712187691bc746ccbff3d corporate/3.0/i586/libpython2.3-devel-2.3.7-0.3.C30mdk.i586.rpm 0b5d65e56944135be61affe8005883d0 corporate/3.0/i586/python-2.3.7-0.3.C30mdk.i586.rpm f75ff9f728b94997571a8d0d74a7ab21 corporate/3.0/i586/python-base-2.3.7-0.3.C30mdk.i586.rpm a8d1dca0dc331ba20370693a40180b8a corporate/3.0/i586/python-docs-2.3.7-0.3.C30mdk.i586.rpm da0d1cde85111104f754f2917c330d43 corporate/3.0/i586/tkinter-2.3.7-0.3.C30mdk.i586.rpm 2e721dd00daf3f183b0b2f08fda11d22 corporate/3.0/SRPMS/python-2.3.7-0.3.C30mdk.src.rpm Corporate 3.0/X86_64: 3cef00123723431a9b732de0d8f78d1d corporate/3.0/x86_64/lib64python2.3-2.3.7-0.3.C30mdk.x86_64.rpm c8ae565114282532d176fdd6bbb57314 corporate/3.0/x86_64/lib64python2.3-devel-2.3.7-0.3.C30mdk.x86_64.rpm 9eef4396d6cf03ca83c1d5b7f7c9eeb3 corporate/3.0/x86_64/python-2.3.7-0.3.C30mdk.x86_64.rpm ad4d0d1cced20b7fd37392f45f14500c corporate/3.0/x86_64/python-base-2.3.7-0.3.C30mdk.x86_64.rpm 6e62cd462a994074536e8aeb553696e2 corporate/3.0/x86_64/python-docs-2.3.7-0.3.C30mdk.x86_64.rpm 9861e393e4e17b014f7be8d6fac63a22 corporate/3.0/x86_64/tkinter-2.3.7-0.3.C30mdk.x86_64.rpm 2e721dd00daf3f183b0b2f08fda11d22 corporate/3.0/SRPMS/python-2.3.7-0.3.C30mdk.src.rpm Corporate 4.0: 15bd9c5d9affc50459c8cd7f7ec1ee93 corporate/4.0/i586/libpython2.4-2.4.5-0.3.20060mlcs4.i586.rpm 0faa2120be98b8f31fd10d2a7175c91e corporate/4.0/i586/libpython2.4-devel-2.4.5-0.3.20060mlcs4.i586.rpm 2da3aeeb0e73febb0d92a41555a86a38 corporate/4.0/i586/python-2.4.5-0.3.20060mlcs4.i586.rpm 2c178dda7e62b4bf7a2f9970b11454ee corporate/4.0/i586/python-base-2.4.5-0.3.20060mlcs4.i586.rpm 2df404bd0b04f16860b1152cd00a52b2 corporate/4.0/i586/python-docs-2.4.5-0.3.20060mlcs4.i586.rpm a095125a026ecaf9187c33a61aa50486 corporate/4.0/i586/tkinter-2.4.5-0.3.20060mlcs4.i586.rpm 86b2985d74be8c13e30372425bb3e549 corporate/4.0/SRPMS/python-2.4.5-0.3.20060mlcs4.src.rpm Corporate 4.0/X86_64: 0679e00d989009ec50021d94fc17e94b corporate/4.0/x86_64/lib64python2.4-2.4.5-0.3.20060mlcs4.x86_64.rpm e31a1bc0d0d54e4cff074e168a18bc12 corporate/4.0/x86_64/lib64python2.4-devel-2.4.5-0.3.20060mlcs4.x86_64.rpm 8bcdde1f348a729b287bc0046503b3ee corporate/4.0/x86_64/python-2.4.5-0.3.20060mlcs4.x86_64.rpm 5ba366f0cfd05b6c237fd54eafc36eb2 corporate/4.0/x86_64/python-base-2.4.5-0.3.20060mlcs4.x86_64.rpm d2d906256924badff5042c8e37234130 corporate/4.0/x86_64/python-docs-2.4.5-0.3.20060mlcs4.x86_64.rpm 46b8d19e7b9538afb024e759de6c4dbb corporate/4.0/x86_64/tkinter-2.4.5-0.3.20060mlcs4.x86_64.rpm 86b2985d74be8c13e30372425bb3e549 corporate/4.0/SRPMS/python-2.4.5-0.3.20060mlcs4.src.rpm Mandriva Enterprise Server 5: 6aeb5877fbf4d54183fbacda6ad9682e mes5/i586/libpython2.5-2.5.2-5.3mdvmes5.i586.rpm 1e9bfe0c30d17f3cf0607d44f9c92c16 mes5/i586/libpython2.5-devel-2.5.2-5.3mdvmes5.i586.rpm c9418d922c8b2f5a8345cc4a392176a2 mes5/i586/python-2.5.2-5.3mdvmes5.i586.rpm 597d30dcf87da029d31a3e8f8c233c48 mes5/i586/python-base-2.5.2-5.3mdvmes5.i586.rpm eedb70bf05cf65fdb630eb58e8e204bd mes5/i586/python-docs-2.5.2-5.3mdvmes5.i586.rpm 13ec4b95422075d9918301c33d436f77 mes5/i586/tkinter-2.5.2-5.3mdvmes5.i586.rpm 48593ff9af36df2463a7b93b734b8543 mes5/i586/tkinter-apps-2.5.2-5.3mdvmes5.i586.rpm 0330dea8c2ebbac05df306a559a73b21 mes5/SRPMS/python-2.5.2-5.3mdvmes5.src.rpm Mandriva Enterprise Server 5/X86_64: 4c0809b8bcf86cac61e822a81243b3b1 mes5/x86_64/lib64python2.5-2.5.2-5.3mdvmes5.x86_64.rpm 3927c5aab093995c5c6905823aa11788 mes5/x86_64/lib64python2.5-devel-2.5.2-5.3mdvmes5.x86_64.rpm be5b5099bf96b950546aad1f7ecfc760 mes5/x86_64/python-2.5.2-5.3mdvmes5.x86_64.rpm 20e7190df22fef0732cbeb483153a263 mes5/x86_64/python-base-2.5.2-5.3mdvmes5.x86_64.rpm eca0caa1153fee3826332d69e4c05d00 mes5/x86_64/python-docs-2.5.2-5.3mdvmes5.x86_64.rpm 0a4f9fdc713d24bc2507ac48b3db0a7b mes5/x86_64/tkinter-2.5.2-5.3mdvmes5.x86_64.rpm 04ca6bc6d763cf68d3e3705d8259172f mes5/x86_64/tkinter-apps-2.5.2-5.3mdvmes5.x86_64.rpm 0330dea8c2ebbac05df306a559a73b21 mes5/SRPMS/python-2.5.2-5.3mdvmes5.src.rpm Multi Network Firewall 2.0: 1452617c693de8d4e955a0c5f743ce67 mnf/2.0/i586/libpython2.3-2.3.7-0.3.C30mdk.i586.rpm 07302c967d11fde4ffdbb6ff81b05b7c mnf/2.0/i586/libpython2.3-devel-2.3.7-0.3.C30mdk.i586.rpm e5f65d271eb9e5793f57c407e2975e6c mnf/2.0/i586/python-2.3.7-0.3.C30mdk.i586.rpm 290432b9d3868acde4e90fa3fe4288f5 mnf/2.0/i586/python-base-2.3.7-0.3.C30mdk.i586.rpm 2d9797eda3b0eca2e6b92d28851fdc8f mnf/2.0/i586/python-docs-2.3.7-0.3.C30mdk.i586.rpm 690e1ebed6b23eb195dc2804249108dd mnf/2.0/i586/tkinter-2.3.7-0.3.C30mdk.i586.rpm 30bc1960b03bb97e3494a3466d878371 mnf/2.0/SRPMS/python-2.3.7-0.3.C30mdk.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFKkWClmqjQ0CJFipgRArOMAKClykPz/75lQ1f8+wp1b7M+xUCTAgCg2GrW 7GlYAOU4/RM6do0tWhKZrmw= =mj4E -----END PGP SIGNATURE-----
