Skip to content
OpenAdvisories
Unscored RHSA-2011:0027 6 CVEs

Red Hat Security Advisory: python security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 28, 2026

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client python 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::client python-debuginfo 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::client python-libs 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::client python-tools 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::client tkinter 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation python 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation python-debuginfo 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation python-devel 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::server python 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::server python-debuginfo 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::server python-devel 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::server python-libs 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::server python-tools 0:2.4.3-43.el5
Red Hat · RHEL 5 enterprise_linux:5::server tkinter 0:2.4.3-43.el5

Vulnerabilities 6

  • Unscored —

    Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later ver…

  • Unscored —

    Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application c…

  • Unscored —

    Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified im…

  • Unscored —

    Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspe…

  • Unscored —

    Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent …

  • Unscored —
    CVE-2010-2089 Public exploit EPSS 15%

    The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengt…

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=482814
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=541698
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=569093
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590690
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=598197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=609017
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=609020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=625372
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=644147
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=644761
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0027.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-5983
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5983
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5983
  • report
    https://access.redhat.com/security/cve/CVE-2009-4134
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-4134
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-4134
  • report
    https://access.redhat.com/security/cve/CVE-2010-1449
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1449
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1449
  • report
    https://access.redhat.com/security/cve/CVE-2010-1450
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1450
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1450
  • report
    https://access.redhat.com/security/cve/CVE-2010-1634
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1634
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1634
  • report
    https://access.redhat.com/security/cve/CVE-2010-2089
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2089
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2089