Red Hat Security AdvisoryRHSA-2016:2586
python security, bug fix, and enhancement update
Released 2016-11-03 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) python-2.7.5-48.el7, python-libs-2.7.5-48.el7
- Red Hat Enterprise Linux Client Optional (v. 7) python-debug-2.7.5-48.el7, python-devel-2.7.5-48.el7, python-test-2.7.5-48.el7 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) python-2.7.5-48.el7, python-devel-2.7.5-48.el7, python-libs-2.7.5-48.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) python-debug-2.7.5-48.el7, python-test-2.7.5-48.el7, python-tools-2.7.5-48.el7 +1
- Red Hat Enterprise Linux Server (v. 7) python-2.7.5-48.el7, python-devel-2.7.5-48.el7, python-libs-2.7.5-48.el7 +1
- Red Hat Enterprise Linux Server Optional (v. 7) python-debug-2.7.5-48.el7, python-test-2.7.5-48.el7, python-tools-2.7.5-48.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) python-2.7.5-48.el7, python-devel-2.7.5-48.el7, python-libs-2.7.5-48.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) python-debug-2.7.5-48.el7, python-test-2.7.5-48.el7, python-tools-2.7.5-48.el7 +1
Fixes 1 record
Priority MEDIUM 63
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value,…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.2548 · Published 2016-09-02 · Partial fix CWE-190
