[SECURITY] [DSA 2430-1] python-pam security update

2012-03-1015:51:34

lists.debian.org

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

Low

EPSS

0.502

Percentile

97.5%

JSON

Debian Security Advisory DSA-2430-1 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
March 10, 2012 http://www.debian.org/security/faq

Package : python-pam
Vulnerability : double free
Problem type : remote
Debian-specific: no
CVE ID : CVE-2012-1502

Markus Vervier discovered a double free in the Python interface to the
PAM library, which could lead to denial of service.

For the stable distribution (squeeze), this problem has been fixed in
version 0.4.2-12.2+squeeze1.

For the unstable distribution (sid), this problem has been fixed in
version 0.4.2-13.

We recommend that you upgrade your python-pam packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian6ia64python-pam< 0.4.2-12.2+squeeze1python-pam_0.4.2-12.2+squeeze1_ia64.deb
Debian6s390python-pam< 0.4.2-12.2+squeeze1python-pam_0.4.2-12.2+squeeze1_s390.deb
Debian6kfreebsd-amd64python-pam< 0.4.2-12.2+squeeze1python-pam_0.4.2-12.2+squeeze1_kfreebsd-amd64.deb
Debian6mipspython-pam< 0.4.2-12.2+squeeze1python-pam_0.4.2-12.2+squeeze1_mips.deb
Debian6mipselpython-pam< 0.4.2-12.2+squeeze1python-pam_0.4.2-12.2+squeeze1_mipsel.deb
Debian6allpython-pam< 0.4.2-12.2+squeeze1python-pam_0.4.2-12.2+squeeze1_all.deb
Debian6sparcpython-pam< 0.4.2-12.2+squeeze1python-pam_0.4.2-12.2+squeeze1_sparc.deb
Debian6kfreebsd-i386python-pam< 0.4.2-12.2+squeeze1python-pam_0.4.2-12.2+squeeze1_kfreebsd-i386.deb
Debian6amd64python-pam< 0.4.2-12.2+squeeze1python-pam_0.4.2-12.2+squeeze1_amd64.deb
Debian6armelpython-pam< 0.4.2-12.2+squeeze1python-pam_0.4.2-12.2+squeeze1_armel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	ia64	python-pam	< 0.4.2-12.2+squeeze1	python-pam_0.4.2-12.2+squeeze1_ia64.deb
Debian	6	s390	python-pam	< 0.4.2-12.2+squeeze1	python-pam_0.4.2-12.2+squeeze1_s390.deb
Debian	6	kfreebsd-amd64	python-pam	< 0.4.2-12.2+squeeze1	python-pam_0.4.2-12.2+squeeze1_kfreebsd-amd64.deb
Debian	6	mips	python-pam	< 0.4.2-12.2+squeeze1	python-pam_0.4.2-12.2+squeeze1_mips.deb
Debian	6	mipsel	python-pam	< 0.4.2-12.2+squeeze1	python-pam_0.4.2-12.2+squeeze1_mipsel.deb
Debian	6	all	python-pam	< 0.4.2-12.2+squeeze1	python-pam_0.4.2-12.2+squeeze1_all.deb
Debian	6	sparc	python-pam	< 0.4.2-12.2+squeeze1	python-pam_0.4.2-12.2+squeeze1_sparc.deb
Debian	6	kfreebsd-i386	python-pam	< 0.4.2-12.2+squeeze1	python-pam_0.4.2-12.2+squeeze1_kfreebsd-i386.deb
Debian	6	amd64	python-pam	< 0.4.2-12.2+squeeze1	python-pam_0.4.2-12.2+squeeze1_amd64.deb
Debian	6	armel	python-pam	< 0.4.2-12.2+squeeze1	python-pam_0.4.2-12.2+squeeze1_armel.deb