Test Kennung:	1.3.6.1.4.1.25623.1.0.61216
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200807-01 (python)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200807-01.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200807-01. Vulnerability Insight: Multiple integer overflows may allow for Denial of Service. Solution: The imageop module is no longer built in the unaffected versions. All Python 2.3 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-lang/python-2.3.6-r6' All Python 2.4 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-lang/python-2.4.4-r13' CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1679 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html Debian Security Information: DSA-1551 (Google Search) http://www.debian.org/security/2008/dsa-1551 Debian Security Information: DSA-1620 (Google Search) http://www.debian.org/security/2008/dsa-1620 http://security.gentoo.org/glsa/glsa-200807-01.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 http://bugs.python.org/msg64682 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10583 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7800 http://secunia.com/advisories/29889 http://secunia.com/advisories/29955 http://secunia.com/advisories/30872 http://secunia.com/advisories/31255 http://secunia.com/advisories/31358 http://secunia.com/advisories/31365 http://secunia.com/advisories/31518 http://secunia.com/advisories/31687 http://secunia.com/advisories/33937 http://secunia.com/advisories/38675 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 SuSE Security Announcement: SUSE-SR:2008:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://www.ubuntu.com/usn/usn-632-1 XForce ISS Database: python-imageopc-bo(41958) https://exchange.xforce.ibmcloud.com/vulnerabilities/41958 Common Vulnerability Exposure (CVE) ID: CVE-2008-1721 BugTraq ID: 28715 http://www.securityfocus.com/bid/28715 Bugtraq: 20080409 IOActive Security Advisory: Buffer overflow in Python zlib extension module (Google Search) http://www.securityfocus.com/archive/1/490690/100/0/threaded Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/507985/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2008:085 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407 http://www.securitytracker.com/id?1019823 http://secunia.com/advisories/37471 http://securityreason.com/securityalert/3802 http://www.vupen.com/english/advisories/2008/1229/references http://www.vupen.com/english/advisories/2009/3316 XForce ISS Database: zlib-pystringfromstringandsize-bo(41748) https://exchange.xforce.ibmcloud.com/vulnerabilities/41748 Common Vulnerability Exposure (CVE) ID: CVE-2008-1887 BugTraq ID: 28749 http://www.securityfocus.com/bid/28749 Bugtraq: 20080411 IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows (Google Search) http://www.securityfocus.com/archive/1/490776 Bugtraq: 20090824 rPSA-2009-0122-1 idle python (Google Search) http://www.securityfocus.com/archive/1/506056/100/0/threaded https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10407 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8624 XForce ISS Database: python-pystringfromstringandsize-bo(41944) https://exchange.xforce.ibmcloud.com/vulnerabilities/41944
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.