Skip to content
OpenAdvisories
Unscored RHSA-2011:0492 4 CVEs

Red Hat Security Advisory: python security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client python 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::client python-debuginfo 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::client python-libs 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::client python-tools 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::client tkinter 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation python 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation python-debuginfo 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation python-devel 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::server python 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::server python-debuginfo 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::server python-devel 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::server python-libs 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::server python-tools 0:2.4.3-44.el5
Red Hat · RHEL 5 enterprise_linux:5::server tkinter 0:2.4.3-44.el5

Vulnerabilities 4

  • Unscored —
    CVE-2009-3720 EPSS 28%

    The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and …

    ghostscript expat swish-e matanza Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2010-3493

    Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers …

  • Unscored —
    CVE-2011-1015

    The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers t…

  • Unscored —
    CVE-2011-1521

    The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify re…

    python2.7 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=531697
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=632200
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=680094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=690560
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0492.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3720
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3720
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3720
  • report
    https://access.redhat.com/security/cve/CVE-2010-3493
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3493
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3493
  • report
    https://access.redhat.com/security/cve/CVE-2011-1015
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1015
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1015
  • report
    https://access.redhat.com/security/cve/CVE-2011-1521
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1521
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1521