Red Hat Security AdvisoryRHSA-2015:1330
python security, bug fix, and enhancement update
Released 2015-07-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) python-2.6.6-64.el6, python-libs-2.6.6-64.el6, tkinter-2.6.6-64.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-devel-2.6.6-64.el6, python-test-2.6.6-64.el6, python-tools-2.6.6-64.el6
- Red Hat Enterprise Linux HPC Node (v. 6) python-2.6.6-64.el6, python-devel-2.6.6-64.el6, python-libs-2.6.6-64.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-test-2.6.6-64.el6, python-tools-2.6.6-64.el6, tkinter-2.6.6-64.el6
- Red Hat Enterprise Linux Server (v. 6) python-2.6.6-64.el6, python-devel-2.6.6-64.el6, python-devel-2.6.6-64.el6.ppc +3
- Red Hat Enterprise Linux Server Optional (v. 6) python-test-2.6.6-64.el6, python-tools-2.6.6-64.el6, tkinter-2.6.6-64.el6
- Red Hat Enterprise Linux Workstation (v. 6) python-2.6.6-64.el6, python-devel-2.6.6-64.el6, python-libs-2.6.6-64.el6 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-test-2.6.6-64.el6, python-tools-2.6.6-64.el6
Fixes 3 records
Priority MEDIUM 63
The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23907 · Published 2020-02-20 · Partial fix CWE-22
Priority MEDIUM 55
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.27229 · Published 2014-02-28 · Partial fix CWE-119
Priority LOW 36
Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.05122 · Published 2014-10-08 · Partial fix CWE-189
THREATIST.IORead the docs