Skip to content
OpenAdvisories
Unscored RHSA-2009:1176 10 CVEs

Red Hat Security Advisory: python security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client python 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::client python-debuginfo 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::client python-tools 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::client tkinter 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::client_workstation python 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::client_workstation python-debuginfo 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::client_workstation python-devel 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::server python 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::server python-debuginfo 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::server python-devel 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::server python-tools 0:2.4.3-24.el5_3.6
Red Hat · RHEL 5 enterprise_linux:5::server tkinter 0:2.4.3-24.el5_3.6

Vulnerabilities 10

  • Unscored —
    CVE-2007-2052 Public exploit EPSS 14%

    Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect…

  • Unscored —
    CVE-2007-4965 Public exploit EPSS 14%

    Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause…

    python-py Azure Linux
  • Unscored —
    CVE-2008-1721 Public exploit EPSS 23%

    Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-1887

    Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a…

    python-py Azure Linux
  • Unscored —
    CVE-2008-2315

    Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via …

    python-py Azure Linux
  • Unscored —
    CVE-2008-3142

    Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a d…

    python-py Azure Linux
  • Unscored —
    CVE-2008-3143

    Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via…

    python-py Azure Linux
  • Unscored —
    CVE-2008-3144

    Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow cont…

    python-py Azure Linux
  • Unscored —
    CVE-2008-4864 Public exploit EPSS 21%

    Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent att…

    python-py Azure Linux
  • Unscored —
    CVE-2008-5031

    Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=235093
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=295971
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=442005
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=443810
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=455008
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=455013
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=455018
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=469656
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470915
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1176.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-2052
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2052
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2052
  • report
    https://access.redhat.com/security/cve/CVE-2007-4965
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-4965
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-4965
  • report
    https://access.redhat.com/security/cve/CVE-2008-1721
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1721
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1721
  • report
    https://access.redhat.com/security/cve/CVE-2008-1887
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1887
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1887
  • report
    https://access.redhat.com/security/cve/CVE-2008-2315
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2315
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2315
  • report
    https://access.redhat.com/security/cve/CVE-2008-3142
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3142
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3142
  • report
    https://access.redhat.com/security/cve/CVE-2008-3143
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3143
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3143
  • report
    https://access.redhat.com/security/cve/CVE-2008-3144
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3144
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3144
  • report
    https://access.redhat.com/security/cve/CVE-2008-4864
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4864
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4864