121904 – python: stack smashing attack in function sha_done()

Bug 121904 - python: stack smashing attack in function sha_done()

Summary: python: stack smashing attack in function sha_done()

Status:	RESOLVED DUPLICATE of bug 120846

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	[OLD] Core system (show other bugs)
Hardware:	All Linux

Importance:	High major (vote)
Assignee:	Gentoo Linux bug wranglers

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2006-02-06 16:35 UTC by infobox.oleg
Modified:	2006-02-06 19:16 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description infobox.oleg 2006-02-06 16:35:52 UTC

I had a problem with [summary] issue during emerges (only some packages, e.g. iptraf, apache2). After that emerge run was aborted.

I've found asollution:
emerge unmerge dev-python/pycrypto

Now affected packages emerge just fine.

emerge --info:
Portage 2.1_pre4-r1 (default-linux/amd64/2005.1, gcc-3.4.5-vanilla, glibc-2.3.6-r2, 2.6.12-gentoo-r6 x86_64)
=================================================================
System uname: 2.6.12-gentoo-r6 x86_64 AMD Athlon(tm) 64 Processor 3200+
Gentoo Base System version 1.6.14
ccache version 2.4 [disabled]
dev-lang/python:     2.3.5-r2, 2.4.2-r1
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1-r1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="amd64 ~amd64"
AUTOCLEAN="yes"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O3 -march=athlon64 -fomit-frame-pointer"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O3 -march=athlon64 -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/ http://ftp.easynet.nl/mirror/gentoo/ http://mirror.gentoo.no/ http://www.mirrorservice.org/sites/www.ibiblio.org/gentoo/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="acl acpi amd64 apache2 apm audiofile avi bash-completion bcmath berkdb bitmap-fonts bzip2 caps cdb crypt cups curl curlwrappers dba dbm dbx dedicated dio doc eds emboss encode exif expat fam fastcgi foomaticdb ftp gd gdbm gif gnutls gpm gstreamer gtk2 hal hardened iconv imlib innodb ipv6 jabber jpeg ldap libwww lzw lzw-tiff m17n-lib mad maildir mhash mmap mp3 mpeg msession mysql ncurses nis nls nptl ogg oss pam pcntl pcre pdflib php pic png posix postgres python qt quicktime readline sasl sdl session snmp sockets socks5 spl ssl svg sysvipc tcpd threads tiff truetype-fonts type1-fonts unicode usb userlocales vhosts xml xml2 xpm zlib zliob elibc_glibc kernel_linux userland_GNU"
Unset:  ASFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY

Comment 1 solar (RETIRED) gentoo-dev

2006-02-06 19:16:49 UTC


*** This bug has been marked as a duplicate of 120846 ***