Red Hat Security Advisory: python security, bug fix, and enhancement update

Fixed packages 28

Vulnerabilities 4

• Unscored —
  CVE-2013-1752 Rejected

  Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of …

  python2.7 Ubuntu
  Jun 3, 2019
• Unscored —
  CVE-2014-1912 Public exploit EPSS 27%

  Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3…

  python2.7 Debian
  Feb 28, 2014
• Unscored —
  CVE-2014-4650 Public exploit EPSS 24%

  The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path…

  python3.4 python2.7 python2.7 Debian Ubuntu
  Feb 20, 2020
• Unscored —
  CVE-2014-7185

  Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive inform…

  python2.7 python-py python2.7 Debian Ubuntu Azure Linux
  Oct 8, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/articles/1495363
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=794632
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1046174
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1062370
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1073165
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1113527
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1146026
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1160640
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1180864
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1199997
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1223037
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1330.json
• report
  https://access.redhat.com/security/cve/CVE-2013-1752
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-1752
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-1752
• report
  https://access.redhat.com/security/cve/CVE-2014-1912
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-1912
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-1912
• report
  https://access.redhat.com/security/cve/CVE-2014-4650
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-4650
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-4650
• report
  https://access.redhat.com/security/cve/CVE-2014-7185
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-7185
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-7185