Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Fedora 22: Critical Python-Pycurl Update for Use-After-Free Issue

fedora
Calendar Grey November 27, 2015
Scroller Fedora
Important notice for Fedora 22 regarding a security vulnerability in python-pycurl that impacts the unicode FORM_BUFFERPTR, caused by a use-after-free flaw.
python-pycurl-7.19.5.1-4.fc23 - fix a use after free issue with unicode FORM_BUFFERPTR (#1277488) python-pycurl-7.19.5.1-3.fc22 - fix a use after free issue with unicode FORM_BUFF...

Summary

PycURL is a Python interface to libcurl. PycURL can be used to fetch

objects identified by a URL from a Python program, similar to the

urllib Python module. PycURL is mature, very fast, and supports a lot

of features.

Update Information:

python-pycurl-7.19.5.1-4.fc23 - fix a use after free issue with unicode FORM_BUFFERPTR (#1277488) python-pycurl-7.19.5.1-3.fc22 - fix a use after free issue with unicode FORM_BUFFERPTR (#1277488)

Topics%20covered

Topics Covered

security advisory critical issue Fedora use-after-free python-pycurl

Change Log

References


[ 1 ] Bug #1277489 - python-pycurl: Use-after-free vulnerability in HTTPPOST when using FORM_BUFFERPTR with Unicode string [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1277489

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update python-pycurl' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python-pycurl
Product: Fedora 22
Version: 7.19.5.1
Release: 3.fc22
URL: http://pycurl.io/
Summary: A Python interface to libcurl

Topics%20covered

Topics Covered

security advisory critical issue Fedora use-after-free python-pycurl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.