Red Hat Security AdvisoryRHSA-2016:1627
rh-python35-python security update
Released 2016-08-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-python35-python-3.5.1-9.el7, rh-python35-python-debug-3.5.1-9.el7, rh-python35-python-devel-3.5.1-9.el7 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) rh-python35-python-3.5.1-9.el7, rh-python35-python-debug-3.5.1-9.el7, rh-python35-python-devel-3.5.1-9.el7 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) rh-python35-python-3.5.1-9.el7, rh-python35-python-debug-3.5.1-9.el7, rh-python35-python-devel-3.5.1-9.el7 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-python35-python-3.5.1-9.el7, rh-python35-python-debug-3.5.1-9.el7, rh-python35-python-devel-3.5.1-9.el7 +4
Fixes 3 records
Priority MEDIUM 45
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protection…
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.15352 · Published 2016-09-02 · Partial fix CWE-693
Priority LOW 39
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF seq…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.09887 · Published 2016-09-02 · Partial fix CWE-113
Priority LOW 35
The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.04526 · Published 2019-11-27 · Partial fix CWE-601
