From b7700753f9278cb149b133ca845a9609bb3408ef Mon Sep 17 00:00:00 2001 From: Ruslan Makhmatkhanov Date: Fri, 17 Jun 2016 17:03:57 +0000 Subject: [PATCH] Document integer overflow in python's zipimport module PR: 210324 Submitted by: Vladimir Krstulja Security: CVE-2016-5636 --- security/vuxml/vuln.xml | 39 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 117cd8cd7872..f0dcd5299ff3 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,45 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + Python -- Integer overflow in zipimport module + + + python35 + 3.5.1_3 + + + python34 + 3.4.4_3 + + + python33 + 3.3.6_5 + + + python27 + 2.7.11_3 + + + + +

Python reports:

+
+

Possible integer overflow and heap corruption in + zipimporter.get_data()

+
+ + + + http://bugs.python.org/issue26171 + CVE-2016-5636 + + + 2016-01-21 + 2016-06-17 + + + drupal -- multiple vulnerabilities