Red Hat Security AdvisoryRHSA-2012:0744
python security update
Released 2012-06-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) python-2.6.6-29.el6_2.2, python-libs-2.6.6-29.el6_2.2, tkinter-2.6.6-29.el6_2.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-2.6.6-29.el6_2.2, python-devel-2.6.6-29.el6_2.2, python-test-2.6.6-29.el6_2.2 +1
- Red Hat Enterprise Linux HPC Node (v. 6) python-2.6.6-29.el6_2.2, python-libs-2.6.6-29.el6_2.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-2.6.6-29.el6_2.2, python-devel-2.6.6-29.el6_2.2, python-test-2.6.6-29.el6_2.2 +2
- Red Hat Enterprise Linux Server (v. 6) python-2.6.6-29.el6_2.2, python-devel-2.6.6-29.el6_2.2, python-libs-2.6.6-29.el6_2.2 +1
- Red Hat Enterprise Linux Server Optional (v. 6) python-2.6.6-29.el6_2.2, python-test-2.6.6-29.el6_2.2, python-tools-2.6.6-29.el6_2.2 +1
- Red Hat Enterprise Linux Workstation (v. 6) python-2.6.6-29.el6_2.2, python-devel-2.6.6-29.el6_2.2, python-libs-2.6.6-29.el6_2.2 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-2.6.6-29.el6_2.2, python-test-2.6.6-29.el6_2.2, python-tools-2.6.6-29.el6_2.2
Fixes 4 records
Priority LOW 31
Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to c…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0506 · Published 2012-10-05 · Partial fix CWE-310
Priority LOW 31
SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) vi…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05402 · Published 2012-10-05 · Fixed CWE-399
Priority LOW 19
The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, whic…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.03177 · Published 2012-06-27 · Partial fix CWE-79
Priority LOW 11
Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by re…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00429 · Published 2012-08-27 · Partial fix CWE-264
THREATIST.IORead the docs