ELSA-2011-0027

ELSA-2011-0027 - python security, bug fix, and enhancement update

Type:	SECURITY
Severity:	LOW
Release Date:	2011-01-20

Description

[2.4.3-43]
- add missing patch 206
Related: rhbz#549372

[2.4.3-42]
- fix test_pyclbr to match the urllib change in patch 204 (patch 206)
- allow the 'no_proxy' environment variable to override 'ftp_proxy' in
urllib2 (patch 207)
- fix typos in names of patches 204 and 205
Related: rhbz#549372

[2.4.3-41]
- backport support for the 'no_proxy' environment variable to the urllib and
urllib2 modules (patches 204 and 205, respectively)
Resolves: rhbz#549372

[2.4.3-40]
- backport fixes for arena allocator from 2.5a1
- disable arena allocator when run under valgrind on x86, x86_64, ppc, ppc64
(patch 203)
- add patch to add sys._debugmallocstats() hook (patch 202)
Resolves: rhbz#569093

[2.4.3-39]
- fix various flaws in the 'audioop' module
- Resolves: CVE-2010-1634 CVE-2010-2089
- backport the new PySys_SetArgvEx libpython entrypoint from 2.6
- Related: CVE-2008-5983
- restrict creation of the .relocation-tag files to i386 builds
- Related: rhbz#644761
- move the python-optik metadata from the core subpackage to the python-libs
subpackage
- Related: rhbz#625372

[2.4.3-38]
- add metadata to ensure that 'yum install python-libs' works
- Related: rhbz#625372

[2.4.3-37]
- create dummy ELF file '.relocation-tag' to force RPM directory coloring,
fixing i386 on ia64 compat
- Resolves: rhbz#644761

[2.4.3-36]
- Backport fix for http://bugs.python.org/issue7082 to 2.4.3
- Resolves: rhbz#644147

[2.4.3-35]
- Rework rgbimgmodule fix for CVE-2008-3143
- Resolves: rhbz#644425 CVE-2009-4134 CVE-2010-1449 CVE-2010-1450

[2.4.3-34]
- fix stray 'touch' command
- Related: rhbz#625372

[2.4.3-33]
- Preserve timestamps when fixing shebangs (patch 104) and when installing, to
minimize .pyc/.pyo differences across architectures (due to the embedded mtime
in .pyc/.pyo headers)
- Related: rhbz#625372

[2.4.3-32]
- introduce libs subpackage as a dependency of the core package, moving the
shared libraries and python standard libraries there
- Resolves: rhbz#625372

[2.4.3-31]
- dont use -b when applying patch 103
- Related: rhbz#263401

[2.4.3-30]
- add missing patch
- Resolves: rhbz#263401

[2.4.3-29]
- Backport Python 2.5s tarfile module (0.8.0) to 2.4.3
- Resolves: rhbz#263401

[2.4.3-28]
- Backport fix for leaking filedescriptors in subprocess error-handling path
from Python 2.6
- Resolves: rhbz#609017
- Backport usage of 'poll' within the subprocess module to 2.4.3
- Resolves: rhbz#609020

Related CVEs

CVE-2008-5983

CVE-2009-4134

CVE-2010-1449

CVE-2010-1450

CVE-2010-1634

CVE-2010-2089

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	python-2.4.3-43.el5.src.rpm	bbd57a51d0562603bf20027e0b084581	ELSA-2012-0745
	python-2.4.3-43.el5.i386.rpm	8baada1253a906fdbbf10e716203fb9a	ELSA-2012-0745
	python-devel-2.4.3-43.el5.i386.rpm	65fafd10a69885f72930097c7eefb543	ELSA-2012-0745
	python-libs-2.4.3-43.el5.i386.rpm	96d393de350678f9339422302f1c8af7	ELSA-2012-0745
	python-tools-2.4.3-43.el5.i386.rpm	cb7e3cd4ec34f82a11e451425c556467	ELSA-2012-0745
	tkinter-2.4.3-43.el5.i386.rpm	54ae2fc372249079185a92879e57d660	ELSA-2012-0745
Oracle Linux 5 (ia64)	python-2.4.3-43.el5.src.rpm	bbd57a51d0562603bf20027e0b084581	ELSA-2012-0745
	python-2.4.3-43.el5.ia64.rpm	9054fa9e09fc2bcb139901d765e86ed6	ELSA-2012-0745
	python-devel-2.4.3-43.el5.ia64.rpm	15707c623701ce55b6bfc6bbe935a1b7	ELSA-2012-0745
	python-libs-2.4.3-43.el5.ia64.rpm	526207f2a976221fe716c7b52532e109	ELSA-2012-0745
	python-tools-2.4.3-43.el5.ia64.rpm	bfd625b30c7d30ceb350da0120015267	ELSA-2012-0745
	tkinter-2.4.3-43.el5.ia64.rpm	643c9396b25c6214aa1edf769a350b0b	ELSA-2012-0745
Oracle Linux 5 (x86_64)	python-2.4.3-43.el5.src.rpm	bbd57a51d0562603bf20027e0b084581	ELSA-2012-0745
	python-2.4.3-43.el5.x86_64.rpm	bba0d6f737dd82c3a0fc788a0f7b07ff	ELSA-2012-0745
	python-devel-2.4.3-43.el5.i386.rpm	65fafd10a69885f72930097c7eefb543	ELSA-2012-0745
	python-devel-2.4.3-43.el5.x86_64.rpm	bb7ab2e4bd0f82fa4afe089cc4348d44	ELSA-2012-0745
	python-libs-2.4.3-43.el5.x86_64.rpm	2da63a4a376aee27ddfa5ecbb984972c	ELSA-2012-0745
	python-tools-2.4.3-43.el5.x86_64.rpm	cb2eebe34801f0a0edf6d4502243bf95	ELSA-2012-0745
	tkinter-2.4.3-43.el5.x86_64.rpm	fc691ff5170a2f33bdcecdab1d402eb8	ELSA-2012-0745

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team