Some vulnerabilities have been reported in Python, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

The vulnerabilities are caused due to various integer overflows in the "audioop_tostereo()", "audioop_lin2lin()", and "audioop_ratecv()" functions within audioop.c of the audioop module. These can be exploited to e.g. cause heap-based buffer overflows.

The vulnerabilities may be related to:
SA31305

NOTE: The "audioop_ulaw2lin()", "audioop_alaw2lin()", and "audioop_adpcm2lin()" functions also contain integer overflows, but may not lead to buffer overflows.

Solution
Fixed in the SVN repository.
Further details available to Secunia VIM customers

Provided and/or discovered by
Red Hat Security Response Team

Changelog
Further details available to Secunia VIM customers

Original Advisory
Red Hat Bug #590690:
https://bugzilla.redhat.com/show_bug.cgi?id=590690

Python Issue #8674:
http://bugs.python.org/issue8674

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers