Mageia alert MGASA-2012-0208 (python3)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0208: python3-3.2.3-1.3.mga2 (2/core) 
Date:
    	     
 
Sun, 12 Aug 2012 20:20:50 +0200
Message-ID:
    	     
 
<20120812182049.GA25244@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0208
Date: 	August 12th, 2012
Affected releases: 	2


Description:
Updated python3 packages fix security vulnerability:

In the utf-16 decoder after calling unicode_decode_call_errorhandler
aligned_end is not updated. This may potentially cause data leaks,
memory damage, and crash (CVE-2012-2135).


Updated Packages:
lib(64)python3.2-3.2.3-1.3.mga2
lib(64)python3-devel-3.2.3-1.3.mga2
python3-3.2.3-1.3.mga2
python3-docs-3.2.3-1.3.mga2
tkinter3-3.2.3-1.3.mga2
tkinter3-apps-3.2.3-1.3.mga2


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2135
http://lists.opensuse.org/opensuse-updates/2012-07/msg000...
https://bugs.mageia.org/show_bug.cgi?id=6759
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...