Description
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | python +4 | 2.4.3-43.el5 | RHSA-2011:0027 |
| RHEL 4 | python +4 | 2.3.4-14.9.el4 | RHSA-2011:0260 |
Advisories 2
- RHSA-2011:0027 Red Hat Security Advisory: python security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2011:0260 Red Hat Security Advisory: python security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 43068 third-party-advisory
- http://support.apple.com/kb/HT4435
- ADV-2011-0212 vdb-entry
- 43364 third-party-advisory
- ADV-2011-0413 vdb-entry
- APPLE-SA-2010-11-10-1 vendor-advisory
- ADV-2011-0122 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=541698
- SUSE-SR:2011:002 vendor-advisory
- 42888 third-party-advisory
- 40365 vdb-entry
- RHSA-2011:0027 vendor-advisory
- MDVSA-2010:215 vendor-advisory
- http://bugs.python.org/issue8678
- RHSA-2011:0260 vendor-advisory