Stay Secure with the Latest Linux Advisories

security advisorydenial of servicesecurity issue

Mageia 6: MGASA-2019-0084 Moderate: Python TLS Denial Of Service

An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability (CVE-2019-5010). . MGASA-2019-0084 - Updated python packages fix security vulnerability Publication date: 14 Feb 2019 URL: https://advisories.mageia.org/MGASA-2019-0084.html Type: security Affected Mageia releases: 6 CVE: CVE-2019-5010 An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability (CVE-2019-5010). References: - https://bugs.mageia.org/show_bug.cgi?id=24340 - http://lists.suse.com/pipermail/sle-security-updates/2019-February/005089.html - https://www.cve.org/CVERecord?id=CVE-2019-5010 SRPMS: - 6/core/python-2.7.15-1.2.mga6 . The latest Mageia release rectifies a denial of service vulnerability found in Python's X509 certificate parser, which could affect your TLS connections.. python security update,Mageia advisory,denial of service,certificate vulnerability. . LinuxSecurity.com Team

Feb 14, 2019 Mageia