openSUSE Security Update : python-apache-libcloud (openSUSE-SU-2014:0198-1)

Updated to 0.13.3 bnc857209, CVE-2013-6480 + Security fix release, for destroying nodes on digitalOcean 'datascrub' method is always invoked - Require python-setuptools instead of distribute upstreams merged - Updated to 0.13.2 - General : - Don't sent Content-Length: 0 header with POST and PUT...

SuSE 11.3 Security Update : python-setuptools (SAT Patch Number 9116)

python-setuptools so far used only HTTP to retrieve packages, which could have lead to man in the middle attacks on newly installed python code. This update adjusts it to use HTTPS, guaranteeing better connection integrity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Fedora Update for python-setuptools FEDORA-2013-23140

Check for the Version of python-setuptools OpenVAS Vulnerability Test Fedora Update for python-setuptools FEDORA-2013-23140 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for python-setuptools FEDORA-2013-23141

Check for the Version of python-setuptools OpenVAS Vulnerability Test Fedora Update for python-setuptools FEDORA-2013-23141 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for python-setuptools FEDORA-2013-23141

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for python-setuptools FEDORA-2013-23140

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : python-setuptools-0.6.49-1.fc19 (2013-23141)

Fix for CVE-2013-2215: Weak integrity checks when loading resources extracted from zipped eggs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 18 : python-setuptools-0.6.49-1.fc18 (2013-23140)

Fix for CVE-2013-2215: Weak integrity checks when loading resources extracted from zipped eggs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

[SECURITY] Fedora 19 Update: python-setuptools-0.6.49-1.fc19

Setuptools is a collection of enhancements to the Python distutils that all ow you to more easily build and distribute Python packages, especially ones th at have dependencies on other packages. This package contains the runtime components of setuptools, necessary to execute the software that...

[SECURITY] Fedora 18 Update: python-setuptools-0.6.49-1.fc18

Setuptools is a collection of enhancements to the Python distutils that all ow you to more easily build and distribute Python packages, especially ones th at have dependencies on other packages. This package contains the runtime components of setuptools, necessary to execute the software that...

GLSA-201310-09 : Setuptools: Man-in-the-Middle attack

The remote host is affected by the vulnerability described in GLSA-201310-09 Setuptools: Man-in-the-Middle attack Setuptools does not check the integrity of downloaded Python packages. Impact : A remote attacker could perform man-in-the-middle attacks to execute arbitrary code with the privileges...

Setuptools: Man-in-the-Middle attack

Background Setuptools is a manager for Python packages. Description Setuptools does not check the integrity of downloaded Python packages. Impact A remote attacker could perform man-in-the-middle attacks to execute arbitrary code with the privileges of the process. Workaround There is no known...

MGASA-2013-0274 Updated python-setuptools and python-virtualenv packages fix security vulnerability

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product CVE-2013-1633...

Updated python-setuptools and python-virtualenv packages fix security vulnerability

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product CVE-2013-1633...

[ MDVSA-2013:227 ] python-setuptools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:227 http://www.mandriva.com/en/support/security/ Package : python-setuptools Date : September 9, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability has been...

Mandriva Linux Security Advisory : python-setuptools (MDVSA-2013:227)

A vulnerability has been discovered and corrected in python-setuptools/python-virtualenv : easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute...

Fedora 18 : python-virtualenv-1.10.1-1.fc18 (2013-14902)

From upstream : - Upgraded pip to v1.4.1 - Upgraded setuptools to v0.9.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 19 : python-virtualenv-1.10.1-1.fc19 (2013-14891)

From upstream : - Upgraded pip to v1.4.1 - Upgraded setuptools to v0.9.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2013-1633

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...

PYSEC-2013-22

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...