Test ID:	1.3.6.1.4.1.25623.1.0.61467
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2008-217-01)
Summary:	The remote host is missing an update for the 'python' package(s) announced via the SSA:2008-217-01 advisory.
Description:	Summary: The remote host is missing an update for the 'python' package(s) announced via the SSA:2008-217-01 advisory. Vulnerability Insight: New python packages are available for Slackware 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures (CVE) database: [links moved to references] Here are the details from the Slackware 12.1 ChangeLog: +--------------------------+ patches/packages/python-2.5.2-i486-2_slack12.1.tgz: Patched various overflows and other security problems. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'python' package(s) on Slackware 10.1, Slackware 10.2, Slackware 11.0, Slackware 12.0, Slackware 12.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1679 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html Debian Security Information: DSA-1551 (Google Search) http://www.debian.org/security/2008/dsa-1551 Debian Security Information: DSA-1620 (Google Search) http://www.debian.org/security/2008/dsa-1620 http://security.gentoo.org/glsa/glsa-200807-01.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 http://bugs.python.org/msg64682 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10583 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7800 http://secunia.com/advisories/29889 http://secunia.com/advisories/29955 http://secunia.com/advisories/30872 http://secunia.com/advisories/31255 http://secunia.com/advisories/31358 http://secunia.com/advisories/31365 http://secunia.com/advisories/31518 http://secunia.com/advisories/31687 http://secunia.com/advisories/33937 http://secunia.com/advisories/38675 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 SuSE Security Announcement: SUSE-SR:2008:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://www.ubuntu.com/usn/usn-632-1 XForce ISS Database: python-imageopc-bo(41958) https://exchange.xforce.ibmcloud.com/vulnerabilities/41958 Common Vulnerability Exposure (CVE) ID: CVE-2008-1721 BugTraq ID: 28715 http://www.securityfocus.com/bid/28715 Bugtraq: 20080409 IOActive Security Advisory: Buffer overflow in Python zlib extension module (Google Search) http://www.securityfocus.com/archive/1/490690/100/0/threaded Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/507985/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2008:085 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407 http://www.securitytracker.com/id?1019823 http://secunia.com/advisories/37471 http://securityreason.com/securityalert/3802 http://www.vupen.com/english/advisories/2008/1229/references http://www.vupen.com/english/advisories/2009/3316 XForce ISS Database: zlib-pystringfromstringandsize-bo(41748) https://exchange.xforce.ibmcloud.com/vulnerabilities/41748 Common Vulnerability Exposure (CVE) ID: CVE-2008-2315 BugTraq ID: 30491 http://www.securityfocus.com/bid/30491 Debian Security Information: DSA-1667 (Google Search) http://www.debian.org/security/2008/dsa-1667 http://security.gentoo.org/glsa/glsa-200807-16.xml http://www.openwall.com/lists/oss-security/2008/11/05/2 http://www.openwall.com/lists/oss-security/2008/11/05/3 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761 http://secunia.com/advisories/31305 http://secunia.com/advisories/31332 http://secunia.com/advisories/32793 http://www.vupen.com/english/advisories/2008/2288 XForce ISS Database: python-modules-bo(44172) https://exchange.xforce.ibmcloud.com/vulnerabilities/44172 XForce ISS Database: python-multiple-bo(44173) https://exchange.xforce.ibmcloud.com/vulnerabilities/44173 Common Vulnerability Exposure (CVE) ID: CVE-2008-2316 Bugtraq: 20080813 rPSA-2008-0243-1 idle python (Google Search) http://www.securityfocus.com/archive/1/495445/100/0/threaded http://secunia.com/advisories/31473 XForce ISS Database: python-hashlib-overflow(44174) https://exchange.xforce.ibmcloud.com/vulnerabilities/44174 Common Vulnerability Exposure (CVE) ID: CVE-2008-3142 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11466 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8422 XForce ISS Database: python-unicode-bo(44170) https://exchange.xforce.ibmcloud.com/vulnerabilities/44170 Common Vulnerability Exposure (CVE) ID: CVE-2008-3144 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10170 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7725 XForce ISS Database: python-pyosvsnprintf-bo(44171) https://exchange.xforce.ibmcloud.com/vulnerabilities/44171
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.