Red Hat Security Advisory

RHSA-2011:0492

python security update

Released 2011-05-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) python-2.4.3-44.el5, python-2.4.3-44.el5.i386, python-2.4.3-44.el5.ia64 +17
Red Hat Enterprise Linux Desktop (v. 5 client) python-2.4.3-44.el5, python-2.4.3-44.el5.i386, python-libs-2.4.3-44.el5 +5
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) python-2.4.3-44.el5, python-devel-2.4.3-44.el5, python-devel-2.4.3-44.el5.i386

Fixes 4 records

TI-2009-03544 CVE-2009-3720 · GHSA-pj3x-74qr-vrr4

The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in…

MEDIUM 45

The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) v…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.27924 Published 2009-11-03 Fixed

TI-2011-01340 CVE-2011-1521 · GHSA-cq22-fw8f-mvcw

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process…

LOW 35

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information o…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03564 Published 2011-05-24 Fixed CWE-399

TI-2011-00874 CVE-2011-1015 · GHSA-76v4-rfvh-v87h

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and…

LOW 29

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning o…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03803 Published 2011-05-09 Fixed CWE-200

TI-2010-03323 CVE-2010-3493 · GHSA-5rjw-m4xp-g2m7

Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2…

LOW 25

Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP conne…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02798 Published 2010-10-19 Fixed CWE-362