Bug 1202800 (CVE-2015-0838)

Summary:	CVE-2015-0838 python-dulwich: buffer overflow in apply_delta()
Product:	[Other] Security Response	Reporter:	Martin Prpič <mprpic>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	carnil, mail, security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-05-27 23:10:52 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1214581, 1214583
Bug Blocks:

Description Martin Prpič 2015-03-17 13:15:12 UTC

The following flaw was found in python-dulwich:

Ivan Fratric of the Google Security Team has found a buffer overflow in the C implementation of the apply_delta() function in Dulwich. This function is used when accessing Git objects in pack files. Any Git server or client based on Dulwich that handles untrusted pack files is very likely to be vulnerable.

This issue has been assigned CVE-2015-0838.

Comment 1 Martin Prpič 2015-03-17 13:16:32 UTC

Created attachment 1002789 [details]
CVE-2015-0838-dulwich.patch

Comment 2 Kurt Seifried 2015-03-22 15:41:23 UTC

This issue is now public:

http://seclists.org/oss-sec/2015/q1/932

Comment 3 Martin Prpič 2015-04-23 06:58:26 UTC

Created python-dulwich tracking bugs for this issue:

Affects: epel-all [bug 1214583]
Affects: fedora-all [bug 1214581]

Comment 4 Fabian Affolter 2015-05-27 23:10:52 UTC

0.10.0 is in stable. 

https://bugzilla.redhat.com/show_bug.cgi?id=1204889