Lucene search

K
mageiaGentoo FoundationMGASA-2014-0140
HistoryMar 24, 2014 - 11:40 a.m.

Updated python3 package fixes security vulnerabilities

2014-03-2411:40:10
Gentoo Foundation
advisories.mageia.org
10

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.006 Low

EPSS

Percentile

78.6%

ZipExtFile.read goes into 100% CPU infinite loop on maliciously binary edited zips (CVE-2013-7338).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchpython3< 3.3.0-4.7python3-3.3.0-4.7.mga3
Mageia4noarchpython3< 3.3.2-13.2python3-3.3.2-13.2.mga4

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.006 Low

EPSS

Percentile

78.6%