Red Hat Security AdvisoryRHSA-2016:1626
python security update
Released 2016-08-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) python-2.7.5-38.el7_2, python-libs-2.7.5-38.el7_2
- Red Hat Enterprise Linux Client Optional (v. 7) python-debug-2.7.5-38.el7_2, python-devel-2.7.5-38.el7_2, python-test-2.7.5-38.el7_2 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) python-2.7.5-38.el7_2, python-devel-2.7.5-38.el7_2, python-libs-2.7.5-38.el7_2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) python-debug-2.7.5-38.el7_2, python-test-2.7.5-38.el7_2, python-tools-2.7.5-38.el7_2 +1
- Red Hat Enterprise Linux Desktop (v. 6) python-2.6.6-66.el6_8, python-libs-2.6.6-66.el6_8, tkinter-2.6.6-66.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-devel-2.6.6-66.el6_8, python-test-2.6.6-66.el6_8, python-tools-2.6.6-66.el6_8
- Red Hat Enterprise Linux HPC Node (v. 6) python-2.6.6-66.el6_8, python-devel-2.6.6-66.el6_8, python-libs-2.6.6-66.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-test-2.6.6-66.el6_8, python-tools-2.6.6-66.el6_8, tkinter-2.6.6-66.el6_8
- Red Hat Enterprise Linux Server (v. 6) python-2.6.6-66.el6_8, python-devel-2.6.6-66.el6_8, python-devel-2.6.6-66.el6_8.ppc +3
- Red Hat Enterprise Linux Server (v. 7) python-2.7.5-38.el7_2, python-devel-2.7.5-38.el7_2, python-libs-2.7.5-38.el7_2 +1
- Red Hat Enterprise Linux Server Optional (v. 6) python-test-2.6.6-66.el6_8, python-tools-2.6.6-66.el6_8, tkinter-2.6.6-66.el6_8
- Red Hat Enterprise Linux Server Optional (v. 7) python-debug-2.7.5-38.el7_2, python-test-2.7.5-38.el7_2, python-tools-2.7.5-38.el7_2 +1
- Red Hat Enterprise Linux Workstation (v. 6) python-2.6.6-66.el6_8, python-devel-2.6.6-66.el6_8, python-libs-2.6.6-66.el6_8 +1
- Red Hat Enterprise Linux Workstation (v. 7) python-2.7.5-38.el7_2, python-devel-2.7.5-38.el7_2, python-libs-2.7.5-38.el7_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-test-2.6.6-66.el6_8, python-tools-2.6.6-66.el6_8
- Red Hat Enterprise Linux Workstation Optional (v. 7) python-debug-2.7.5-38.el7_2, python-test-2.7.5-38.el7_2, python-tools-2.7.5-38.el7_2 +1
Fixes 3 records
Priority MEDIUM 45
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protection…
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.15352 · Published 2016-09-02 · Partial fix CWE-693
Priority LOW 39
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF seq…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.09887 · Published 2016-09-02 · Partial fix CWE-113
Priority LOW 35
The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.04526 · Published 2019-11-27 · Partial fix CWE-601
