Mandriva Linux Security Advisory : python (MDVSA-2013:117)
Low Nessus Plugin ID 66129
SynopsisThe remote Mandriva Linux host is missing one or more security updates.
DescriptionUpdated python packages fix security vulnerabilities :
A race condition was found in the way the Python distutils module set file permissions during the creation of the .pypirc file. If a local user had access to the home directory of another user who is running distutils, they could use this flaw to gain access to that user's .pypirc file, which can contain usernames and passwords for code repositories (CVE-2011-4944).
Additionally, python has been built against the system expat and ffi libraries, to avoid any future issues with those (mitigates CVE-2012-0876 for expat).
SolutionUpdate the affected packages.