Bug 208166

Summary: CVE-2006-4980 repr unicode buffer overflow
Product: [Fedora] Fedora Reporter: Josh Bressers <bressers>
Component: pythonAssignee: Jeremy Katz <katzj>
Status: CLOSED CURRENTRELEASE QA Contact: Brock Organ <borgan>
Severity: medium Docs Contact:
Priority: medium    
Version: 5CC: katzj, redhat-bugzilla
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: impact=important,source=vendorsec,reported=20060925,public=20060816
Fixed In Version: 2.4.3-9.FC5 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-01-03 16:17:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Description Josh Bressers 2006-09-26 18:20:23 UTC
+++ This bug was initially created as a clone of Bug #208162 +++

A bug in the way python's repr function handles certain unicode objects.  repr
mistakenly assumes that all unicode characters will be 6 characters in length
(UTF-16) when it is possible for some strings to use wide characters (UTF-32) to
overflow a buffer.

There is more information in the Ubuntu bug:
https://launchpad.net/distros/ubuntu/+source/python2.4/+bug/56633

and the upstream bug:
http://sourceforge.net/tracker/index.php?aid=1541585&group_id=5470&atid=305470&func=detail

Comment 1 Fedora Update System 2006-10-24 19:32:27 UTC
python-2.4.3-9.FC5 has been pushed for fc5, which should resolve this issue.  If these problems are still present in this version, then please make note of it in this bug report.

Comment 2 Fedora Update System 2006-11-06 20:34:57 UTC
python-2.4.3-9.FC5 has been pushed for fc5, which should resolve this issue.  If these problems are still present in this version, then please make note of it in this bug report.