Red Hat Security AdvisoryRHSA-2016:1166
python27 security, bug fix, and enhancement update
Released 2016-05-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) python27-1.1-25.el6, python27-PyYAML-3.10-14.el6, python27-numpy-1:1.7.1-10.el6 +18
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) python27-1.1-25.el7, python27-PyYAML-3.10-14.el7, python27-numpy-1:1.7.1-10.el7 +17
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) python27-1.1-25.el6, python27-PyYAML-3.10-14.el6, python27-numpy-1:1.7.1-10.el6 +18
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) python27-1.1-25.el6, python27-PyYAML-3.10-14.el6, python27-numpy-1:1.7.1-10.el6 +18
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) python27-1.1-25.el7, python27-PyYAML-3.10-14.el7, python27-numpy-1:1.7.1-10.el7 +17
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) python27-1.1-25.el7, python27-PyYAML-3.10-14.el7, python27-numpy-1:1.7.1-10.el7 +17
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) python27-1.1-25.el6, python27-PyYAML-3.10-14.el6, python27-numpy-1:1.7.1-10.el6 +18
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) python27-1.1-25.el7, python27-PyYAML-3.10-14.el7, python27-numpy-1:1.7.1-10.el7 +17
Fixes 2 records
Priority LOW 30
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted cert…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01876 · Published 2016-06-07 · Partial fix CWE-19
Priority LOW 28
Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remot…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04857 · Published 2013-10-09 · Partial fix CWE-399
