Secunia - Stay Secure
Gartner
Home Corporate Website Jobs Updated Mailing Lists RSS Blog  Online Shop Advertise
Software Inspectors
  Scan Online
  Personal (PSI)
  Network (NSI 2.0)

Solutions For
  Security Professionals
  Security Vendors

Free Solutions For
  Open Communities
  Journalists & Media

Secunia Advisories
  Search
  Historic Advisories
  Listed By Product
  Listed By Vendor
  Statistics / Graphs
  Secunia Research
  Report Vulnerability
  About Advisories

Virus Information
  Chronological List
  Last 10 Virus Alerts
  About Virus Information

Secunia Customers
  Customer Area


Debian update for python Advisory Available in German 

Secunia Advisory: SA29889  
Release Date: 2008-04-21

Critical:
Less critical
Impact: Exposure of sensitive information
DoS
System access
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 4.0
Debian GNU/Linux unstable alias sid


CVE reference:CVE-2007-2052 (Secunia mirror)
CVE-2007-4965 (Secunia mirror)
CVE-2008-1679 (Secunia mirror)
CVE-2008-1721 (Secunia mirror)
CVE-2008-1887 (Secunia mirror)

Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS!


Description:
Debian has issued an update for python. This fixes some security issues, which can potentially be exploited by malicious people to disclose sensitive information, cause a DoS (Denial of Service), or to compromise a vulnerable system.

For more information:
SA25190
SA26837

Solution:
Apply updated packages.

-- Debian 4.0 (stable) --

Source archives:

http://security.debian.org/pool/updat...on2.4/python2.4_2.4.4-3+etch1.diff.gz
Size/MD5 checksum: 195434 8b86b3dc4c5a86a9ad8682fee56f30ca
http://security.debian.org/pool/updat...python2.4/python2.4_2.4.4.orig.tar.gz
Size/MD5 checksum: 9508940 f74ef9de91918f8927e75e8c3024263a
http://security.debian.org/pool/updat...python2.4/python2.4_2.4.4-3+etch1.dsc
Size/MD5 checksum: 1201 585773fd24634e05bb56b8cc85215c65

Architecture independent packages:

http://security.debian.org/pool/updat...hon2.4-examples_2.4.4-3+etch1_all.deb
Size/MD5 checksum: 589642 63092c4cd1ea78c0993345be25a162b8
http://security.debian.org/pool/updat.../idle-python2.4_2.4.4-3+etch1_all.deb
Size/MD5 checksum: 60864 21664a3f029087144046b6c175e88736

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updat...2.4/python2.4_2.4.4-3+etch1_alpha.deb
Size/MD5 checksum: 2968890 60a29f058a96e21d278a738fbb8067bf
http://security.debian.org/pool/updat...python2.4-dev_2.4.4-3+etch1_alpha.deb
Size/MD5 checksum: 1848176 ddb7c47970f277baa00e6c080e4530bd
http://security.debian.org/pool/updat...python2.4-dbg_2.4.4-3+etch1_alpha.deb
Size/MD5 checksum: 5226532 5aa6daa859acdfdfcb7445586f4a0eb6
http://security.debian.org/pool/updat...on2.4-minimal_2.4.4-3+etch1_alpha.deb
Size/MD5 checksum: 963606 38c08ee31ae6189631e503ad3d76fa87

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updat...2.4/python2.4_2.4.4-3+etch1_amd64.deb
Size/MD5 checksum: 2967058 6f06a90e94a6068b126413111185aff5
http://security.debian.org/pool/updat...python2.4-dev_2.4.4-3+etch1_amd64.deb
Size/MD5 checksum: 1635936 d5f98666609c652224b5552f5bb6b7a9
http://security.debian.org/pool/updat...on2.4-minimal_2.4.4-3+etch1_amd64.deb
Size/MD5 checksum: 966196 7436b29b52acd99872d79b595f489ace
http://security.debian.org/pool/updat...python2.4-dbg_2.4.4-3+etch1_amd64.deb
Size/MD5 checksum: 5587046 82444f4d11055f259d0899a0f8574b37

arm architecture (ARM)

http://security.debian.org/pool/updat...on2.4/python2.4_2.4.4-3+etch1_arm.deb
Size/MD5 checksum: 2881272 408ac2b8cd6180975109364b26ae1c95
http://security.debian.org/pool/updat...thon2.4-minimal_2.4.4-3+etch1_arm.deb
Size/MD5 checksum: 901442 88d59caa6744da5c62a802124087d09c
http://security.debian.org/pool/updat...4/python2.4-dev_2.4.4-3+etch1_arm.deb
Size/MD5 checksum: 1500512 3113ad3590f5969703ce426a23ca67dd
http://security.debian.org/pool/updat...4/python2.4-dbg_2.4.4-3+etch1_arm.deb
Size/MD5 checksum: 5351974 4f77de8e3dd9c12aa1e06a57cee82dac

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updat...n2.4/python2.4_2.4.4-3+etch1_hppa.deb
Size/MD5 checksum: 3073066 1b4498c26a825c27c6d9765ed8a2e33e
http://security.debian.org/pool/updat.../python2.4-dbg_2.4.4-3+etch1_hppa.deb
Size/MD5 checksum: 5521834 68a5524fdb007cacc29a38865a43781d
http://security.debian.org/pool/updat.../python2.4-dev_2.4.4-3+etch1_hppa.deb
Size/MD5 checksum: 1798220 6c9ce4754c024fbd1674a63c5ba0f06a
http://security.debian.org/pool/updat...hon2.4-minimal_2.4.4-3+etch1_hppa.deb
Size/MD5 checksum: 1017646 b8dd6490a43da08aa36c43712c360ff8

i386 architecture (Intel ia32)

http://security.debian.org/pool/updat...n2.4/python2.4_2.4.4-3+etch1_i386.deb
Size/MD5 checksum: 2849512 2598cb802b7f5e1aac6404b801a0a7f0
http://security.debian.org/pool/updat.../python2.4-dev_2.4.4-3+etch1_i386.deb
Size/MD5 checksum: 1508782 b8ffe50ecf5dfe173765dc5b263b7737
http://security.debian.org/pool/updat.../python2.4-dbg_2.4.4-3+etch1_i386.deb
Size/MD5 checksum: 5176966 f6892dc5e598f1811bfc32ea81a863d6
http://security.debian.org/pool/updat...hon2.4-minimal_2.4.4-3+etch1_i386.deb
Size/MD5 checksum: 900670 7956a1cf96b4b59de2d9e4972e04fff2

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updat...n2.4/python2.4_2.4.4-3+etch1_ia64.deb
Size/MD5 checksum: 3371938 88e170459b0762e1db775753f6d69bb5
http://security.debian.org/pool/updat.../python2.4-dev_2.4.4-3+etch1_ia64.deb
Size/MD5 checksum: 2269496 2c1ef318f92b9d4b1c202ad77c8c4462
http://security.debian.org/pool/updat...hon2.4-minimal_2.4.4-3+etch1_ia64.deb
Size/MD5 checksum: 1289496 d6fba2d2ea64736cf614b0b3b1ced9bf
http://security.debian.org/pool/updat.../python2.4-dbg_2.4.4-3+etch1_ia64.deb
Size/MD5 checksum: 6059106 e1008e68d3d775590b2a29bd7bec7b6c

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updat...n2.4/python2.4_2.4.4-3+etch1_mips.deb
Size/MD5 checksum: 2906992 e6e43c336e1095e3fe7f5985e500bf55
http://security.debian.org/pool/updat.../python2.4-dev_2.4.4-3+etch1_mips.deb
Size/MD5 checksum: 1725610 a9e2b6b11b1d9185885a9f99ed2d03b8
http://security.debian.org/pool/updat.../python2.4-dbg_2.4.4-3+etch1_mips.deb
Size/MD5 checksum: 5646190 5c420d1aa984c190b121c8494c6fca5a
http://security.debian.org/pool/updat...hon2.4-minimal_2.4.4-3+etch1_mips.deb
Size/MD5 checksum: 956712 4949e953435f72cf9d06bb8684170175

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updat...ython2.4-dev_2.4.4-3+etch1_mipsel.deb
Size/MD5 checksum: 1717120 30986065ecf6810f46294c8ca196b538
http://security.debian.org/pool/updat...n2.4-minimal_2.4.4-3+etch1_mipsel.deb
Size/MD5 checksum: 939320 89571b10c2635774f65921083344a911
http://security.debian.org/pool/updat...ython2.4-dbg_2.4.4-3+etch1_mipsel.deb
Size/MD5 checksum: 5507492 a06d9728ef16072ee50b3a1fcf7d08a8
http://security.debian.org/pool/updat....4/python2.4_2.4.4-3+etch1_mipsel.deb
Size/MD5 checksum: 2863620 90b6a4b2c498acb4a46e205d36cf8ec9

powerpc architecture (PowerPC)

http://security.debian.org/pool/updat...thon2.4-dev_2.4.4-3+etch1_powerpc.deb
Size/MD5 checksum: 1639780 4b7c83795b6d07c3a4050d5db977c577
http://security.debian.org/pool/updat...thon2.4-dbg_2.4.4-3+etch1_powerpc.deb
Size/MD5 checksum: 5778968 7e97b8f62daf0f91e48bf6af20552b51
http://security.debian.org/pool/updat...4/python2.4_2.4.4-3+etch1_powerpc.deb
Size/MD5 checksum: 2956174 8e55e492ee8aa6e4787e77b161a245e5
http://security.debian.org/pool/updat...2.4-minimal_2.4.4-3+etch1_powerpc.deb
Size/MD5 checksum: 978078 9212e583942704f71a07478baa4d6446

s390 architecture (IBM S/390)

http://security.debian.org/pool/updat...hon2.4-minimal_2.4.4-3+etch1_s390.deb
Size/MD5 checksum: 973904 3cc580a21934a7f5fac203235386e250
http://security.debian.org/pool/updat...n2.4/python2.4_2.4.4-3+etch1_s390.deb
Size/MD5 checksum: 2976776 efb7a2dc81b69a45ead47986d3b8fce5
http://security.debian.org/pool/updat.../python2.4-dev_2.4.4-3+etch1_s390.deb
Size/MD5 checksum: 1646932 146ee8341c514308b15ca151753b3ca8
http://security.debian.org/pool/updat.../python2.4-dbg_2.4.4-3+etch1_s390.deb
Size/MD5 checksum: 5667818 9b4543d9a0e5f51e8d9b790f6c3b43c8

-- Debian unstable (sid) --

Fixed in version 2.4.5-2.

Original Advisory:
http://www.us.debian.org/security/2008/dsa-1551

Other References:
SA25190:
http://secunia.com/advisories/25190/

SA26837:
http://secunia.com/advisories/26837/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1199 Related Secunia Security Advisories, displaying 10

1. Debian update for afuse
2. Debian update for gaim
3. Debian update for lighttpd
4. Debian update for iceweasel
5. Debian update for mysql-dfsg-5.0
6. Debian update for poppler
7. Debian bind DNS Cache Poisoning Vulnerability
8. Debian update for bind9
9. Debian update for pcre3
10. Debian update for wordpress

Show all related advisories


Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.








Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Do you think it's important to read Setup/User Guides for applications for use within your network?


See Results   


Most Popular Advisories

1.
BlackBerry Enterprise Server PDF Processing Vulnerability
2.
Sun Solaris System Management Agent SNMP Daemon Buffer Overflow
3.
Vim configure.in Insecure Temporary Files
4.
tplSoccerSite Multiple SQL Injection Vulnerabilities
5.
IBM WebSphere Application Server Unspecified Vulnerability
6.
MRO Maximo Information Disclosure and Cross-Site Scripting
7.
ArticleBeach Script "page" File Inclusion Vulnerability
8.
LunarNight Laboratory WebProxy Cross-Site Scripting
9.
Joomla DT Register Component "eventId" SQL Injection
10.
phpHoo3 "viewCat" SQL Injection Vulnerability





Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia