Red Hat Security AdvisoryRHSA-2012:0745
python security update
Released 2012-06-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) python-2.4.3-46.el5_8.2, python-devel-2.4.3-46.el5_8.2, python-devel-2.4.3-46.el5_8.2.i386
- Red Hat Enterprise Linux (v. 5 server) python-2.4.3-46.el5_8.2, python-2.4.3-46.el5_8.2.i386, python-2.4.3-46.el5_8.2.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) python-2.4.3-46.el5_8.2, python-2.4.3-46.el5_8.2.i386, python-libs-2.4.3-46.el5_8.2 +5
Fixes 3 records
Priority LOW 31
Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to c…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0506 · Published 2012-10-05 · Partial fix CWE-310
Priority LOW 19
The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, whic…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.03177 · Published 2012-06-27 · Partial fix CWE-79
Priority LOW 11
Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by re…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00429 · Published 2012-08-27 · Partial fix CWE-264
THREATIST.IORead the docs