Red Hat Security AdvisoryRHSA-2013:1582
python security, bug fix, and enhancement update
Released 2013-11-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) python-2.6.6-51.el6, python-libs-2.6.6-51.el6, tkinter-2.6.6-51.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-2.6.6-51.el6, python-devel-2.6.6-51.el6, python-test-2.6.6-51.el6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) python-2.6.6-51.el6, python-devel-2.6.6-51.el6, python-libs-2.6.6-51.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-2.6.6-51.el6, python-test-2.6.6-51.el6, python-tools-2.6.6-51.el6 +1
- Red Hat Enterprise Linux Server (v. 6) python-2.6.6-51.el6, python-devel-2.6.6-51.el6, python-libs-2.6.6-51.el6 +1
- Red Hat Enterprise Linux Server Optional (v. 6) python-2.6.6-51.el6, python-test-2.6.6-51.el6, python-tools-2.6.6-51.el6 +1
- Red Hat Enterprise Linux Workstation (v. 6) python-2.6.6-51.el6, python-devel-2.6.6-51.el6, python-libs-2.6.6-51.el6 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-2.6.6-51.el6, python-test-2.6.6-51.el6, python-tools-2.6.6-51.el6
Fixes 1 record
Priority LOW 28
The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-th…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05347 · Published 2013-08-18 · Fixed CWE-20
