Red Hat Security AdvisoryRHSA-2011:0027
python security, bug fix, and enhancement update
Released 2011-01-13 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) python-2.4.3-43.el5, python-2.4.3-43.el5.i386, python-2.4.3-43.el5.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) python-2.4.3-43.el5, python-2.4.3-43.el5.i386, python-libs-2.4.3-43.el5 +5
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) python-2.4.3-43.el5, python-devel-2.4.3-43.el5, python-devel-2.4.3-43.el5.i386
Fixes 6 records
Priority MEDIUM 41
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04877 · Published 2010-05-27 · Fixed CWE-120
Priority MEDIUM 41
Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04877 · Published 2010-05-27 · Fixed CWE-190
Priority LOW 38
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and appl…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.14643 · Published 2010-05-27 · Partial fix CWE-787
Priority LOW 31
Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separat…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00491 · Published 2009-01-28 · Fixed CWE-426
Priority LOW 30
Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04211 · Published 2010-05-27 · Partial fix CWE-190
Priority LOW 30
Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid point…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04421 · Published 2010-05-27 · Fixed CWE-787