Red Hat Security AdvisoryRHSA-2009:1177
python security update
Released 2009-07-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 python-2.3.4-14.7.el4_8.2, python-2.3.4-14.7.el4_8.2.i386, python-2.3.4-14.7.el4_8.2.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 python-2.3.4-14.7.el4_8.2, python-2.3.4-14.7.el4_8.2.i386, python-devel-2.3.4-14.7.el4_8.2 +7
- Red Hat Enterprise Linux ES version 4 python-2.3.4-14.7.el4_8.2, python-2.3.4-14.7.el4_8.2.i386, python-2.3.4-14.7.el4_8.2.ia64 +12
- Red Hat Enterprise Linux WS version 4 python-2.3.4-14.7.el4_8.2, python-2.3.4-14.7.el4_8.2.i386, python-2.3.4-14.7.el4_8.2.ia64 +12
Fixes 9 records
Priority MEDIUM 53
Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffe…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.22621 · Published 2008-04-10 · Fixed CWE-681
Priority MEDIUM 52
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.21024 · Published 2008-10-31 · Fixed CWE-190
Priority MEDIUM 49
Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06292 · Published 2008-04-18 · Fixed CWE-120
Priority MEDIUM 48
Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02988 · Published 2008-11-10 · Fixed CWE-189
Priority MEDIUM 40
Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect m…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04493 · Published 2008-08-01 · Fixed CWE-120
Priority MEDIUM 40
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tup…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04381 · Published 2008-08-01 · Fixed CWE-190
Priority LOW 38
Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c,…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03125 · Published 2008-08-01 · Fixed CWE-190
Priority LOW 37
Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04067 · Published 2008-04-21 · Fixed CWE-190
Priority LOW 30
Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other im…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04229 · Published 2008-08-01 · Fixed CWE-190