Description
Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/archive/1/495445/100/0/threaded ↗
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html ↗
- http://www.vupen.com/english/advisories/2008/2288 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44173 ↗
- http://www.securityfocus.com/bid/30491 ↗
- http://secunia.com/advisories/33937 ↗
- http://secunia.com/advisories/31687 ↗
- http://security.gentoo.org/glsa/glsa-200807-16.xml ↗
- http://support.apple.com/kb/HT3438 ↗
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html ↗
- http://secunia.com/advisories/31358 ↗
- http://secunia.com/advisories/31332 ↗
- http://www.ubuntu.com/usn/usn-632-1 ↗
- http://secunia.com/advisories/31518 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44174 ↗
- http://secunia.com/advisories/31305 ↗
- http://bugs.gentoo.org/show_bug.cgi?id=230640 ↗
- http://secunia.com/advisories/31365 ↗
- http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 ↗
- http://secunia.com/advisories/31473 ↗
- http://wiki.rpath.com/Advisories:rPSA-2008-0243 ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 ↗
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 ↗
- http://bugs.gentoo.org/attachment.cgi?id=159422&action=view ↗