Skip to content
OpenAdvisories
Unscored RHSA-2011:0491 6 CVEs

Red Hat Security Advisory: python security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as python 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::as python-debuginfo 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::as python-devel 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::as python-docs 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::as python-tools 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::as tkinter 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop python 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop python-debuginfo 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop python-devel 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop python-docs 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop python-tools 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop tkinter 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::es python 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::es python-debuginfo 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::es python-devel 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::es python-docs 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::es python-tools 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::es tkinter 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::ws python 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::ws python-debuginfo 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::ws python-devel 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::ws python-docs 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::ws python-tools 0:2.3.4-14.10.el4
Red Hat · RHEL 4 enterprise_linux:4::ws tkinter 0:2.3.4-14.10.el4

Vulnerabilities 6

  • Unscored —
    CVE-2009-3720 EPSS 28%

    The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and …

    ghostscript expat swish-e matanza Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2010-1634

    Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent …

    python2.7 Debian
  • Unscored —
    CVE-2010-2089 Public exploit EPSS 15%

    The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengt…

    python2.7 Debian
  • Unscored —
    CVE-2010-3493

    Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers …

  • Unscored —
    CVE-2011-1015

    The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers t…

  • Unscored —
    CVE-2011-1521

    The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify re…

    python2.7 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://rhn.redhat.com/errata/RHSA-2009-1625.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=531697
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=590690
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=598197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=632200
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=680094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=690560
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0491.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3720
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3720
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3720
  • report
    https://access.redhat.com/security/cve/CVE-2010-1634
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1634
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1634
  • report
    https://access.redhat.com/security/cve/CVE-2010-2089
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2089
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2089
  • report
    https://access.redhat.com/security/cve/CVE-2010-3493
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3493
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3493
  • report
    https://access.redhat.com/security/cve/CVE-2011-1015
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1015
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1015
  • report
    https://access.redhat.com/security/cve/CVE-2011-1521
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1521
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1521