Skip to content
OpenAdvisories
Unscored DLA-25-1 8 CVEs

python2.6 - security update

Published Jul 31, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 python2.6 2.6.6-8+deb6u1

Vulnerabilities 8

  • Unscored —

    The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers t…

  • Unscored —

    The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify re…

  • Unscored —

    The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7…

  • Unscored —

    Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been writt…

  • Unscored —

    SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x bef…

  • Unscored —

    Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restrict…

  • Unscored —

    The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character i…

  • Unscored —
    CVE-2014-1912 Public exploit EPSS 27%

    Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3…