Skip to content
OpenAdvisories
Unscored RHSA-2009:1177 9 CVEs

Red Hat Security Advisory: python security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as python 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::as python-debuginfo 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::as python-devel 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::as python-docs 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::as python-tools 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::as tkinter 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop python 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop python-debuginfo 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop python-devel 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop python-docs 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop python-tools 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop tkinter 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es python 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es python-debuginfo 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es python-devel 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es python-docs 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es python-tools 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es tkinter 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws python 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws python-debuginfo 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws python-devel 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws python-docs 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws python-tools 0:2.3.4-14.7.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws tkinter 0:2.3.4-14.7.el4_8.2

Vulnerabilities 9

  • Unscored —
    CVE-2008-1679

    Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of s…

    python-py Azure Linux
  • Unscored —
    CVE-2008-1721 Public exploit EPSS 23%

    Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-1887

    Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a…

    python-py Azure Linux
  • Unscored —
    CVE-2008-2315

    Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via …

    python-py Azure Linux
  • Unscored —
    CVE-2008-3142

    Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a d…

    python-py Azure Linux
  • Unscored —
    CVE-2008-3143

    Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via…

    python-py Azure Linux
  • Unscored —
    CVE-2008-3144

    Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow cont…

    python-py Azure Linux
  • Unscored —
    CVE-2008-4864 Public exploit EPSS 21%

    Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent att…

    python-py Azure Linux
  • Unscored —
    CVE-2008-5031

    Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=441306
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=442005
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=443810
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=455008
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=455013
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=455018
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=469656
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470915
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1177.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-1679
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1679
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1679
  • report
    https://access.redhat.com/security/cve/CVE-2008-1721
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1721
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1721
  • report
    https://access.redhat.com/security/cve/CVE-2008-1887
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1887
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1887
  • report
    https://access.redhat.com/security/cve/CVE-2008-2315
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2315
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2315
  • report
    https://access.redhat.com/security/cve/CVE-2008-3142
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3142
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3142
  • report
    https://access.redhat.com/security/cve/CVE-2008-3143
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3143
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3143
  • report
    https://access.redhat.com/security/cve/CVE-2008-3144
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3144
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3144
  • report
    https://access.redhat.com/security/cve/CVE-2008-4864
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4864
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4864
  • report
    https://access.redhat.com/security/cve/CVE-2008-5031
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5031
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5031