1. Ubuntu Security Notices
  2. USN-430-1

USN-430-1: mod_python vulnerability

Publication date

6 March 2007

Overview

mod_python vulnerability

Releases

Details

Miles Egan discovered that mod_python, when used in output filter mode,
did not handle output larger than 16384 bytes, and would display freed
memory, possibly disclosing private data. Thanks to Jim Garrison of the
Software Freedom Law Center for identifying the original bug as a
security vulnerability.

Miles Egan discovered that mod_python, when used in output filter mode,
did not handle output larger than 16384 bytes, and would display freed
memory, possibly disclosing private data. Thanks to Jim Garrison of the
Software Freedom Law Center for identifying the original bug as a
security vulnerability.

Update instructions

After a standard system upgrade you need to restart Apache to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
6.06 dapper libapache2-mod-python –  3.1.4-0ubuntu1.1
5.10 breezy libapache2-mod-python –  3.1.3-3ubuntu1.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›