Package: python3
Version: 3.2.3~rc1-2
Severity: important
Tags: security

From: http://seclists.org/oss-sec/2012/q2/183

Python 3.2/3.3 utf-16 decoder unicode_decode_call_errorhandler
aligned_end is not updated

does not appear to affect Python 2.x

memory leak/crashes/etc.

http://bugs.python.org/issue14579

Author: Serhiy Storchaka (storchaka)    Date: 2012-04-14 18:46

In the utf-16 decoder after calling unicode_decode_call_errorhandler
aligned_end is not updated. This may potentially cause data leaks,
memory damage, and crash. The bug introduced by implementation of the
issue #4868. In a similar situation in the utf-8 decoder aligned_end
is updated.

-- System Information:
Debian Release: 6.0.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages python3 depends on:
ii  python3-minimal        3.1.3-12+squeeze1 minimal subset of the Python langu
ii  python3.1              3.1.3-1           An interactive high-level object-o

python3 recommends no packages.

Versions of packages python3 suggests:
pn  python3-doc                   <none>     (no description available)
pn  python3-profiler              <none>     (no description available)
pn  python3-tk                    <none>     (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to