ELSA-2016-2586

ELSA-2016-2586 - python security, bug fix, and enhancement update

Type:SECURITY
Severity:LOW
Release Date:2016-11-09

Description


[2.7.5-48.0.1]
- Add Oracle Linux distribution in platform.py [orabug 20812544]

[2.7.5-48]
- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359164

[2.7.5-47]
- Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.get_data()
Resolves: rhbz#1356364

[2.7.5-46]
- Drop patch 221 that backported sslwrap function since it was introducing regressions
- Refactor patch 227
Resolves: rhbz#1331425

[2.7.5-45]
- Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
Raise an error when STARTTLS fails (upstream patch)
- Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
Disabled HTTP header injections in httplib (upstream patch)
Resolves: rhbz#1346357

[2.7.5-44]
- Fix iteration over files with very long lines
Resolves: rhbz#1271760

[2.7.5-43]
- Move python.conf from /etc/tmpfiles.d/ to /usr/lib/tmpfiles.d/
Resolves: rhbz#1288426

[2.7.5-42]
- JSON decoder lone surrogates fix
Resolves: rhbz#1301017

[2.7.5-41]
- Updated PEP493 implementation
Resolves: rhbz#1315758

[2.7.5-40]
- Backport of Computed Goto dispatch
Resolves: rhbz#1289277


Related CVEs


CVE-2016-5636

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 7 (x86_64) python-2.7.5-48.0.1.el7.src.rpm813ba5cc7110527319f49ad2828796b0ELSA-2021-9107
python-2.7.5-48.0.1.el7.x86_64.rpm97ea689a0ebea7263d200f06e5416747ELSA-2021-9107
python-debug-2.7.5-48.0.1.el7.x86_64.rpmd8f3f2a3d2a22f4520907c8027ea1ee9ELSA-2021-9107
python-devel-2.7.5-48.0.1.el7.x86_64.rpme81cdd6c6871fa39cdedcdf6f8312e6fELSA-2021-9107
python-libs-2.7.5-48.0.1.el7.i686.rpm19ab28d7b6ad167865c8f59528b093e6ELSA-2021-9107
python-libs-2.7.5-48.0.1.el7.x86_64.rpmcae3dbe2cdaed63f30e5c1279cf261d4ELSA-2021-9107
python-test-2.7.5-48.0.1.el7.x86_64.rpmece612ffb433e74203e1af49848ef9c7ELSA-2021-9107
python-tools-2.7.5-48.0.1.el7.x86_64.rpm62d57f05c748b754fed6a2bafcc3f896ELSA-2021-9107
tkinter-2.7.5-48.0.1.el7.x86_64.rpm0c8e7e6521766fb4b686e69f818c2ca2ELSA-2021-9107



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete