Description of problem: David Remahl from Apple reported a number of integer overflow security issues in the core python library (dealing with some of the basic types). CVE-2008-2315: Multiple integer overflows in python core (stringobject, unicodeobject, bufferobject, longobject, tupleobject, stropmodule, gcmodule, mmapmodule) Acknowledgements: Red Hat would like to thank David Remahl of the Apple Product Security team for responsibly reporting these issues.
Created attachment 311570 [details] Proposed patch from David against the release25-maint branch of python
Public now via: http://www.gentoo.org/security/en/glsa/glsa-200807-16.xml http://bugs.gentoo.org/show_bug.cgi?id=230640
Upstream commits in 2.4, 2.5 and trunk branch: http://svn.python.org/view?view=rev&rev=65333 http://svn.python.org/view?view=rev&rev=65334 http://svn.python.org/view?view=rev&rev=65335
The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/
This issue has been addressed in following products: Red Hat Enterprise Linux 5 Via RHSA-2009:1176 https://rhn.redhat.com/errata/RHSA-2009-1176.html
This issue has been addressed in following products: Red Hat Enterprise Linux 4 Via RHSA-2009:1177 https://rhn.redhat.com/errata/RHSA-2009-1177.html
This issue has been addressed in following products: Red Hat Enterprise Linux 3 Via RHSA-2009:1178 https://rhn.redhat.com/errata/RHSA-2009-1178.html