[ GLSA 201503-10 ] Python

[GLSA]

Gentoo Linux Security Advisory

Title: Python: Multiple vulnerabilities (GLSA 201503-10)
Severity: normal
Exploitable: local, remote
Date: March 18, 2015
Updated: June 17, 2015
Bug(s): #495224, #500518, #505068, #506084, #514686, #523792, #532232
ID: 201503-10

Synopsis

Multiple vulnerabilities have been found in Python, the worst of
which could lead to arbitrary code execution.


Background

Python is an interpreted, interactive, object-oriented programming
language.


Affected Packages

Package: dev-lang/python
Vulnerable: < 3.3.5-r1
Unaffected: >= 3.3.5-r1
Unaffected: >= 2.7.9-r1 < 2.7.10
Unaffected: >= 2.7.10 < 2.7.11
Unaffected: >= 2.7.11 < 2.7.12
Unaffected: >= 2.7.12 < 2.7.13
Unaffected: >= 2.7.13 < 2.7.14
Unaffected: >= 2.7.14 < 2.7.15
Unaffected: >= 2.7.15 < 2.7.16
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Python. Please review
the CVE identifiers referenced below for details.


Impact

A context-dependent attacker may be able to execute arbitrary code or
cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Python 3.3 users should upgrade to the latest version: