115524 – dev-python/pycurl <=7.15.0 malformed URL string buffer overflow

Bug 115524 - dev-python/pycurl <=7.15.0 malformed URL string buffer overflow

Summary: dev-python/pycurl <=7.15.0 malformed URL string buffer overflow

Status:	RESOLVED INVALID

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	High normal
Assignee:	Gentoo Security

URL:	http://www.hardened-php.net/advisory_...
Whiteboard:	B2 [upstream]
Keywords:

Depends on:
Blocks:

Reported:	2005-12-14 05:37 UTC by Thierry Carrez (RETIRED)
Modified:	2005-12-14 13:05 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Thierry Carrez (RETIRED) gentoo-dev

2005-12-14 05:37:06 UTC

pycurl is probably affected by the same flaw as curl (bug 114710).

Comment 1 Daniel Black (RETIRED) gentoo-dev

2005-12-14 13:05:27 UTC

pycurl is just a wrapper for the curl library.   
   
pycurl-7.15.0 depends on curl-7.15.0 or later.   
   
So there is no security or dependency problem with pycurl - only with curl 
itself.