=========================================================== 
Ubuntu Security Notice USN-585-1             March 11, 2008
python2.4/2.5 vulnerabilities
CVE-2007-2052, CVE-2007-4965
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04
Ubuntu 7.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  python2.4                       2.4.3-0ubuntu6.1

Ubuntu 6.10:
  python2.4                       2.4.4~c1-0ubuntu1.1
  python2.5                       2.5-2ubuntu2.1

Ubuntu 7.04:
  python2.4                       2.4.4-2ubuntu7.1
  python2.5                       2.5.1-0ubuntu1.1

Ubuntu 7.10:
  python2.4                       2.4.4-6ubuntu4.1
  python2.5                       2.5.1-5ubuntu5.1

After a standard system upgrade you need to reboot your computer to
effect the necessary changes.

Details follow:

Piotr Engelking discovered that strxfrm in Python was not correctly
calculating the size of the destination buffer.  This could lead to small
information leaks, which might be used by attackers to gain additional
knowledge about the state of a running Python script. (CVE-2007-2052)

A flaw was discovered in the Python imageop module.  If a script using
the module could be tricked into processing a specially crafted set of
arguments, a remote attacker could execute arbitrary code, or cause the
application to crash. (CVE-2007-4965)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:  2646577 02b11ab10157bad699aebc00ac5704a0
          Size/MD5:     1223 4db3ba70e6bbdeb433be77296f3652d6
          Size/MD5:  9328584 fd9dd825b8c680fa04c2fc2c957964b1

  Architecture independent packages:

          Size/MD5:   243018 9cfc31e97c95f8f0f46b3f187237105e
          Size/MD5:  3357830 1f879b9734e38e3802180daea576b830
          Size/MD5:   587226 c2601420780b64fe685369c31d9078e6

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  5563060 975ee8bf2fc03871fb512a0a57936b8d
          Size/MD5:  1633178 1188bf4f5fbb53f8372dc880cffd06c3
          Size/MD5:    29922 90c745dc4cc524e6f98bed7056373297
          Size/MD5:   792884 33829f16406ba26c16f1bab5cd0d9143
          Size/MD5:   113680 e534ae735b902c11490f45f3425d7c7d
          Size/MD5:  2859998 5e1c1a529c93617a74a1e0e2a58350d9

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  4821430 ed7dace19924f98fc4d6618a92453c8b
          Size/MD5:  1464048 16e6e3ae038de34901e2848f7aaf016f
          Size/MD5:    29168 1b9f8cde871dfeb88b7cb08e0c53593d
          Size/MD5:   701864 f1e12d01a15c1d5f824c67773353375c
          Size/MD5:   110008 1913830cd2a0c7f165b1544951af8821
          Size/MD5:  2737534 d3ee9e3d76b3c1f5f28063cedf49f6af

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  5661870 5a249f2477faaa1ee3563e14c39f6abc
          Size/MD5:  1627940 ac71ebd13cb7fc35229133c6dea4130e
          Size/MD5:    31130 e84f8a19216d005e4e5044ba00a10794
          Size/MD5:   782210 2430cd8cd83965a2a483d328c4c46313
          Size/MD5:   112920 d1102d38a4663e35eb4dceaff8036df7
          Size/MD5:  2885570 1872766c6f3a07cf52cc634a1d1dc4ea

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  5000588 050a17c8bc0934a45f4074298ef343a1
          Size/MD5:  1576290 ec83dbb904a77bbca2360097ce3944c7
          Size/MD5:    29346 f833d78b74d1f0e47127edc78868e711
          Size/MD5:   721730 adcaf3e11eb491d0754242d154f9fe8a
          Size/MD5:   110788 b74a7d9a4f68e0d0a07c53de2ed3f810
          Size/MD5:  2802370 43e447f417712240661de01ebd99d8c7

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5:  2631362 b74f72934d1ae936433da2c1e08942fe
          Size/MD5:     1263 25db92d5c603c23907cb50aaf38464d5
          Size/MD5:  9509938 fd7a4f7c9af50041031b3fc22583504e
          Size/MD5:  2179973 dbc1dd14505c56fea40ceeb7b946c475
          Size/MD5:     1357 3ff43ca95181c9cfedf776696c9aea70
          Size/MD5: 11010528 2ce301134620012ad6dafb27bbcab7eb

  Architecture independent packages:

          Size/MD5:  3366024 a6a5f9f2d73f219597391003e5580415
          Size/MD5:   589412 fbc246d2fc1d3f1a7d90b64a60f2f3c3
          Size/MD5:  2368396 455204dbd74b335302c15bfc18f94139
          Size/MD5:    60682 7615f51c4503d04b392ead875d8e51d4
          Size/MD5:    63046 f61911ccafa627f86fd6210fda79dce8
          Size/MD5:   643202 da5eff059ab57b640a6ba3913f373480

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  5606880 6ad2204c476d097eda65ee16ea14cf29
          Size/MD5:  1643162 1f84076c6c69007f9c8bde35780e7f9f
          Size/MD5:   968472 9a20aa05bb64d81abef712b3fd98dbcb
          Size/MD5:  2948924 faab85314076e61de51aae14ec625e9d
          Size/MD5:  6440622 191172755c997e859fe5e68369ae3112
          Size/MD5:  1817368 3a52a91bb1e1daa4ee5bc2a81bbf1d8d
          Size/MD5:  1052348 398981d6cd1e0983e8834b39007d0d53
          Size/MD5:  3355804 ea4f960f4352394287aa28839349c7b0

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  5189990 2755ebb2e16c862d5771d62f5670a899
          Size/MD5:  1503604 a6bf70790375c105943c2a34574fc80e
          Size/MD5:   896482 fcaad5f958a11dc1c10ae5103e559958
          Size/MD5:  2850474 245053ca93d189dd1f359baafdf59454
          Size/MD5:  5991280 9590d344a7d00334ec201d9e97691b6c
          Size/MD5:  1670742 fa186c9f70570c9e3996fa54c7d85f43
          Size/MD5:   974964 ee74983cb71a33c6de43cbda7e34c1dc
          Size/MD5:  3241182 80fe7da8a4e73f0065bcc5ed7e3e3bc8

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  5800564 73916f933b9580169a0ba306c7157b25
          Size/MD5:  1651474 7a72fdbf125b4f3d6e370636ef4f6022
          Size/MD5:   984168 a83d4f8527da416cbed822c882763c64
          Size/MD5:  2965924 916c273e817efd446f8463e1d6602a92
          Size/MD5:  6652056 225b222c5da5847ec1d83f643eb2cd60
          Size/MD5:  1821596 645066d8f6afe2cb9313c4434ce68f4e
          Size/MD5:  1067766 02753ed7af7f4413eb27b52b5a9911e1
          Size/MD5:  3375762 1de0c455666ac0ca6b43e3468b1a4eb1

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  5218450 978d50680ba6358b197b5e82414a8eec
          Size/MD5:  1597244 ae2c93cddd1643632d224c187001b14d
          Size/MD5:   919552 d5ff8f2289f8796ba960c6e95d2a8455
          Size/MD5:  2882114 9936c764ede4d8ba82070a1653e55508
          Size/MD5:  6013492 503a0272e1ba7eb30f5dd84f58abed30
          Size/MD5:  1773070 e4d0ed797693ce3ae41b34fe348c0f73
          Size/MD5:  1001522 f55f1b7f091845df1285a89833f8efc2
          Size/MD5:  3280172 ea4cd6031d44214f15807d6efa3bf73b

Updated packages for Ubuntu 7.04:

  Source archives:

          Size/MD5:  2686389 e05135b61da304068efc7dcc818b9ef1
          Size/MD5:     1292 800daea33c59743cf1e28ecb68883688
          Size/MD5:  9508940 f74ef9de91918f8927e75e8c3024263a
          Size/MD5:  2975652 343ebf77607a3761ed732b2cfd388801
          Size/MD5:     1414 db3d71bce8ac28b7a76fcc67544298ad
          Size/MD5: 11073614 b7e26a0039645f1145ceb6f4dea4a758

  Architecture independent packages:

          Size/MD5:  3466956 91762cc6b58aa778445f60a030b4e296
          Size/MD5:   590584 94c3c5aebd536d5ce3bd8ea5b742142b
          Size/MD5:  2504462 d890dc32723663b9acaa6d8e711e07f3
          Size/MD5:   647388 8919b95c7404f133c94860a4cdb051e4
          Size/MD5:    61824 90cec68af12ab5a65d02655a7906001c
          Size/MD5:    66198 6de130a8efc5e0a2a8b0e880837d4bde

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  6972326 7fe408b7d21c8b949371a046a537f8b8
          Size/MD5:  1615260 5d9f757e4b4bdc404b2f89ffebf98ec8
          Size/MD5:  1046004 d52f0838090dbeda673b084daf0032a4
          Size/MD5:  2897544 18eb222b15f32389669b451dd9879d4a
          Size/MD5:  8042462 b7b7b8dfdfd1f64972fd7a8e287e527e
          Size/MD5:  1791252 8f6c859c59ae1fd559c0d3f410ec254d
          Size/MD5:  1246068 5db5b7c694fb8b122414dca00d90a84e
          Size/MD5:  3206626 c126b2247b67c654b3c1f4e380cc44f3

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  6403446 6bbd659f84a1792d6351f3d70fd4e7e2
          Size/MD5:  1473834 5bdb2bf6ea8d10aa7eb1d2caf51fec0d
          Size/MD5:   970380 122af6b5bd3cc784814650db43fe63e9
          Size/MD5:  2797500 58a8ffde47b0ca3db868b3e4461ba693
          Size/MD5:  7415400 821086c8c1ebd58d5093cae0c6f2ddf8
          Size/MD5:  1642844 235d9f560e4e3cd84159f840e80cbced
          Size/MD5:  1167604 950463769e4f10559989f9183f246356
          Size/MD5:  3088360 a2216b5cdd06eed46a2b7892bb59f9cd

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  7301850 b4ef4ec8ce782beb589a36126b5a3e16
          Size/MD5:  1634474 dec7ec38f77cd97d0684cfe9009245aa
          Size/MD5:  1071106 33e3adf209a8bbb7c21e6129b05e7a43
          Size/MD5:  2955558 e5948456e4e429ac86aac87822f8b387
          Size/MD5:  8412716 b143742ba6ebe4a9cbb9ea9a0690ae4f
          Size/MD5:  1807936 8998b32ad3618dd1572f9a48737e459a
          Size/MD5:  1275756 860313b3415043825f7738670b2af259
          Size/MD5:  3283656 ca9e4ab2c649f6b59543570defefe93d

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  6583832 4a4cf6cfe29ce48f9b0d73021a671a65
          Size/MD5:  1567194 b2f835f403105f15f4f3b4a7c338e338
          Size/MD5:   997120 93888b1c2463b6d1b5d9ce8a8e69b0f6
          Size/MD5:  2827998 1a27073adf829bd9156d71cd66ef9476
          Size/MD5:  7619184 32afdb2d4871ba4ae7dbe160dbe5bac1
          Size/MD5:  1745356 e3d86571bdb1ae899bb06cea261d7110
          Size/MD5:  1195028 6c5b902e1743053eee0360e7061f5dd4
          Size/MD5:  3126648 be0224088bca7cd602d8fa0031c3256d

Updated packages for Ubuntu 7.10:

  Source archives:

          Size/MD5:  2650607 6aef12698986bbe1da94a18348c915a6
          Size/MD5:     1349 0e9b721bfb4238295e48ede6a4cd2c5a
          Size/MD5:  9508940 f74ef9de91918f8927e75e8c3024263a
          Size/MD5:  3065462 60567c582852d3142bf3f091586ae130
          Size/MD5:     1403 e9d8328c759e28f1eee00ccf7cbf8305
          Size/MD5: 11073614 b7e26a0039645f1145ceb6f4dea4a758

  Architecture independent packages:

          Size/MD5:  3366698 c26e91757dadee6e329f63a9b1f18c46
          Size/MD5:   591178 2959bbadb35890968972e8125f017564
          Size/MD5:  3724494 bbb29dd5af6cb3506a54e283e1b3c2e3
          Size/MD5:   648740 b4a2b8a5172efc8574c24589086d7268
          Size/MD5:    62346 b376601f54c26b3b4849bee3eaa666c8
          Size/MD5:    67166 d318cadbdd6abf2aa353a25b335f6154

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  6925732 5835cb9ebdab5d92f2029eb2fa381e57
          Size/MD5:  1620858 2bfce435e77edf6cd78cf02774d85b2d
          Size/MD5:  1047692 0a342e2f0a2c647b8bc3345a262e95bf
          Size/MD5:  2901408 ca94830bffca9c1b77ed5be070fb5663
          Size/MD5:  8002010 ecba7fe5ffee9450995d5f83b46f23ad
          Size/MD5:  2034460 d94c12115527627386c9c05111964ae3
          Size/MD5:  1251266 7b87968b551e022c8667bc2e8b830ddc
          Size/MD5:  2991084 38a4add02a9c2d3cb650fe8b6649999f

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  6407202 b7df398a68ed5594649004aad956dfe1
          Size/MD5:  1476054 c05abf151ddb531aeeae0352fb603195
          Size/MD5:   972324 285f5c669924c217467638dd0435522d
          Size/MD5:  2799890 3afecfee64a4acaa4d4dbb2be0c2d983
          Size/MD5:  7432920 96b49c72d32a86fb11aa2208845047e0
          Size/MD5:  1877418 43cb08bbf5124087d16e1893d6a5ba9d
          Size/MD5:  1169162 0f6b1cf3faaeb8f81b05ded95ecda7d3
          Size/MD5:  2869464 f67f2b2c0a6b4556ca50e1b164c87af9

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  7213246 6f87bb19edc2ab33fb25022272ebd893
          Size/MD5:  1635556 577f6f503de01171983280732a87368e
          Size/MD5:  1071904 670e80745aab5e89ba0be929cdd2d277
          Size/MD5:  2956526 6c93cbff3bc0bdab325f414bdeb2e7d4
          Size/MD5:  8330120 ca878b6704f3be9082df6cfd551511b3
          Size/MD5:  2046926 5f381166e7935ac945b92500da4f50e3
          Size/MD5:  1277572 f40e202ae395d37382d10d785fe62803
          Size/MD5:  3063082 fc058471dc75f7281ef427cb75835d93

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  6519204 40d97f36f94605397e1b1387482115e5
          Size/MD5:  1567170 2bbc0e8b1d008b897b6b52ecaafb3100
          Size/MD5:   997286 61e6e718b3915b46659934844a007bef
          Size/MD5:  2829526 269e670243c50bc90a2ea76add15e7f9
          Size/MD5:  7555540 14dfdfd1b0066eef74fd8b74002bc857
          Size/MD5:  1983808 7ea10155113ac1863a5bcfd83e45a457
          Size/MD5:  1197548 90dfd12e92282c096030179e2314a94a
          Size/MD5:  2907724 842742ab33f97344cf582e0b0c34c698