Red Hat Security Advisory

RHSA-2007:1076

python security update

Released 2007-12-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Desktop version 3 python-2.2.3-6.8, python-2.2.3-6.8.i386, python-devel-2.2.3-6.8 +5
Red Hat Enterprise Linux AS version 3 python-2.2.3-6.8, python-2.2.3-6.8.i386, python-2.2.3-6.8.ia64 +13
Red Hat Enterprise Linux AS version 4 python-2.3.4-14.4.el4_6.1, python-2.3.4-14.4.el4_6.1.i386, python-2.3.4-14.4.el4_6.1.ia64 +17
Red Hat Enterprise Linux Desktop version 4 python-2.3.4-14.4.el4_6.1, python-2.3.4-14.4.el4_6.1.i386, python-devel-2.3.4-14.4.el4_6.1 +7
Red Hat Enterprise Linux ES version 3 python-2.2.3-6.8, python-2.2.3-6.8.i386, python-2.2.3-6.8.ia64 +9
Red Hat Enterprise Linux ES version 4 python-2.3.4-14.4.el4_6.1, python-2.3.4-14.4.el4_6.1.i386, python-2.3.4-14.4.el4_6.1.ia64 +12
Red Hat Enterprise Linux WS version 3 python-2.2.3-6.8, python-2.2.3-6.8.i386, python-2.2.3-6.8.ia64 +9
Red Hat Enterprise Linux WS version 4 python-2.3.4-14.4.el4_6.1, python-2.3.4-14.4.el4_6.1.i386, python-2.3.4-14.4.el4_6.1.ia64 +12

Fixes 3 records

TI-2007-04787 CVE-2007-4965 · GHSA-m9f3-5w45-2j8h

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow…

MEDIUM 41

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents)…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.13951 Published 2007-09-18 Fixed CWE-190

TI-2007-01974 CVE-2007-2052 · GHSA-7hcx-rxp8-j55g

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python…

LOW 38

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read po…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.13637 Published 2007-04-16 Fixed CWE-193

TI-2006-06968 CVE-2006-7228 · GHSA-hw27-4fxg-c8f3

Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might…

LOW 36

Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) dup…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03661 Published 2007-11-14 Fixed CWE-189