Skip to content
OpenAdvisories
Medium RHSA-2015:1064 6 CVEs

Red Hat Security Advisory: python27 security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27 0:1.1-17.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python 0:2.7.8-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-debug 0:2.7.8-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-debuginfo 0:2.7.8-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-devel 0:2.7.8-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-libs 0:2.7.8-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-pip 0:1.5.6-5.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-setuptools 0:0.9.8-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-simplejson 0:3.2.0-2.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-simplejson-debuginfo 0:3.2.0-2.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-test 0:2.7.8-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-tools 0:2.7.8-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-python-wheel 0:0.24.0-2.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-runtime 0:1.1-17.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-scldevel 0:1.1-17.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 python27-tkinter 0:2.7.8-3.el6
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27 0:1.1-20.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python 0:2.7.8-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-debug 0:2.7.8-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-debuginfo 0:2.7.8-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-devel 0:2.7.8-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-libs 0:2.7.8-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-pip 0:1.5.6-5.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-setuptools 0:0.9.8-5.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-simplejson 0:3.2.0-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-simplejson-debuginfo 0:3.2.0-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-test 0:2.7.8-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-tools 0:2.7.8-3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-python-wheel 0:0.24.0-2.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-runtime 0:1.1-20.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-scldevel 0:1.1-20.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 python27-tkinter 0:2.7.8-3.el7

Vulnerabilities 6

  • Medium 5.9
    CVE-2014-4616

    simplejson before 2.6.1 vulnerable to array index error

    Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode functio…

    python3.4 python2.7 python2.7 python2 Debian Ubuntu Alpine PyPI
  • Unscored —
    CVE-2013-1752 Rejected

    Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of …

    python2.7 Ubuntu
  • Unscored —
    CVE-2013-1753

    The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a deni…

    python3.4 python2.7 python2.7 Debian Ubuntu
  • Unscored —
    CVE-2014-1912 Public exploit EPSS 27%

    Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3…

    python2.7 Debian
  • Unscored —
    CVE-2014-4650 Public exploit EPSS 24%

    The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path…

    python3.4 python2.7 python2.7 Debian Ubuntu
  • Unscored —
    CVE-2014-7185

    Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive inform…

    python2.7 python-py python2.7 Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=994189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1046170
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1046174
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1062370
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1112285
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1113527
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1146026
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1167912
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1170993
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1064.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1752
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1752
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1752
  • report
    https://access.redhat.com/security/cve/CVE-2013-1753
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1753
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1753
  • report
    https://access.redhat.com/security/cve/CVE-2014-1912
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1912
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1912
  • report
    https://access.redhat.com/security/cve/CVE-2014-4616
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4616
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4616
  • report
    https://access.redhat.com/security/cve/CVE-2014-4650
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4650
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4650
  • report
    https://access.redhat.com/security/cve/CVE-2014-7185
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-7185
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-7185