RHBA-2010:0993 - Bug Fix Advisory

Topic

An updated m2crypto package that fixes a memory leak is now available for Red
Hat Enterprise Linux 5.

Description

m2crypto is a Python wrapper for OpenSSL. It makes it possible to call OpenSSL
functions from Python scripts.

This updated m2crypto package fixes the following bug:

• When an "M2Crypto.SSL.Connection" object was created without setting up a

connection, an SSL object was allocated and never freed. Over time, this could
result in a significant memory leak. This update ensures the memory is correctly
deallocated. (BZ#661869)

Users of m2crypto are advised to upgrade to this updated package, which resolves
this issue.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 661869 - memory leak in the attached script

CVEs

(none)

References

(none)