Red Hat Security AdvisoryRHSA-2015:0042
cloud-init security, bug fix, and enhancement update
Released 2015-01-13 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Common for RHEL Client (v. 6) python-backports-1.0-3.el6, python-backports-ssl_match_hostname-3.4.0.2-1.el6, python-six-1.6.1-1.el6 +1
- Red Hat Common for RHEL Compute Node (v. 6) python-backports-1.0-3.el6, python-backports-ssl_match_hostname-3.4.0.2-1.el6, python-six-1.6.1-1.el6 +1
- Red Hat Common for RHEL Server (v. 6) cloud-init-0.7.5-1.el6, python-backports-1.0-3.el6, python-backports-ssl_match_hostname-3.4.0.2-1.el6 +5
- Red Hat Common for RHEL Workstation (v. 6) python-backports-1.0-3.el6, python-backports-ssl_match_hostname-3.4.0.2-1.el6, python-six-1.6.1-1.el6 +1
Fixes 1 record
Priority LOW 28
Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remot…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04857 · Published 2013-10-09 · Partial fix CWE-399
