Red Hat Security Advisory: python security update

Fixed packages 28

Vulnerabilities 4

• Unscored —
  CVE-2011-4940

  The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7…

  python-py python2.7 Debian Azure Linux
  Jun 27, 2012
• Unscored —
  CVE-2011-4944

  Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been writt…

  python2.7 Debian
  Aug 27, 2012
• Unscored —
  CVE-2012-0845

  SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x bef…

  python-py python2.7 Debian Azure Linux
  Oct 5, 2012
• Unscored —
  CVE-2012-1150

  Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restrict…

  python-py python2.7 Debian Azure Linux
  Oct 5, 2012

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  http://www.ocert.org/advisories/ocert-2011-003.html
• article
  https://rhn.redhat.com/errata/RHSA-2012-0731.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=750555
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=758905
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=789790
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=803500
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0744.json
• report
  https://access.redhat.com/security/cve/CVE-2011-4940
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-4940
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-4940
• report
  https://access.redhat.com/security/cve/CVE-2011-4944
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-4944
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-4944
• report
  https://access.redhat.com/security/cve/CVE-2012-0845
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-0845
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-0845
• report
  https://access.redhat.com/security/cve/CVE-2012-1150
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-1150
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-1150