ELSA-2011-0027

ELSA-2011-0027 - python security, bug fix, and enhancement update

Type:	SECURITY
Impact:	LOW
Release Date:	2011-01-20

Description

[2.4.3-43]
- add missing patch 206
Related: rhbz#549372

[2.4.3-42]
- fix test_pyclbr to match the urllib change in patch 204 (patch 206)
- allow the 'no_proxy' environment variable to override 'ftp_proxy' in
urllib2 (patch 207)
- fix typos in names of patches 204 and 205
Related: rhbz#549372

[2.4.3-41]
- backport support for the 'no_proxy' environment variable to the urllib and
urllib2 modules (patches 204 and 205, respectively)
Resolves: rhbz#549372

[2.4.3-40]
- backport fixes for arena allocator from 2.5a1
- disable arena allocator when run under valgrind on x86, x86_64, ppc, ppc64
(patch 203)
- add patch to add sys._debugmallocstats() hook (patch 202)
Resolves: rhbz#569093

[2.4.3-39]
- fix various flaws in the 'audioop' module
- Resolves: CVE-2010-1634 CVE-2010-2089
- backport the new PySys_SetArgvEx libpython entrypoint from 2.6
- Related: CVE-2008-5983
- restrict creation of the .relocation-tag files to i386 builds
- Related: rhbz#644761
- move the python-optik metadata from the core subpackage to the python-libs
subpackage
- Related: rhbz#625372

[2.4.3-38]
- add metadata to ensure that 'yum install python-libs' works
- Related: rhbz#625372

[2.4.3-37]
- create dummy ELF file '.relocation-tag' to force RPM directory coloring,
fixing i386 on ia64 compat
- Resolves: rhbz#644761

[2.4.3-36]
- Backport fix for http://bugs.python.org/issue7082 to 2.4.3
- Resolves: rhbz#644147

[2.4.3-35]
- Rework rgbimgmodule fix for CVE-2008-3143
- Resolves: rhbz#644425 CVE-2009-4134 CVE-2010-1449 CVE-2010-1450

[2.4.3-34]
- fix stray 'touch' command
- Related: rhbz#625372

[2.4.3-33]
- Preserve timestamps when fixing shebangs (patch 104) and when installing, to
minimize .pyc/.pyo differences across architectures (due to the embedded mtime
in .pyc/.pyo headers)
- Related: rhbz#625372

[2.4.3-32]
- introduce libs subpackage as a dependency of the core package, moving the
shared libraries and python standard libraries there
- Resolves: rhbz#625372

[2.4.3-31]
- dont use -b when applying patch 103
- Related: rhbz#263401

[2.4.3-30]
- add missing patch
- Resolves: rhbz#263401

[2.4.3-29]
- Backport Python 2.5s tarfile module (0.8.0) to 2.4.3
- Resolves: rhbz#263401

[2.4.3-28]
- Backport fix for leaking filedescriptors in subprocess error-handling path
from Python 2.6
- Resolves: rhbz#609017
- Backport usage of 'poll' within the subprocess module to 2.4.3
- Resolves: rhbz#609020

Related CVEs

CVE-2008-5983

CVE-2009-4134

CVE-2010-1449

CVE-2010-1450

CVE-2010-1634

CVE-2010-2089

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	python-2.4.3-43.el5.src.rpm	60b53667ea51cf566a6e0e5c223b8cae098ff8a6c3e3bfe06d9bd5dd93d2e559	ELSA-2012-0745	ol5_i386_latest
	python-2.4.3-43.el5.src.rpm	60b53667ea51cf566a6e0e5c223b8cae098ff8a6c3e3bfe06d9bd5dd93d2e559	ELSA-2012-0745	ol5_u6_i386_base
	python-2.4.3-43.el5.i386.rpm	633daf7b464422c533b605f24d56b74b4639a531dc1b23c374c302499a9af8e5	ELSA-2012-0745	ol5_i386_latest
	python-2.4.3-43.el5.i386.rpm	633daf7b464422c533b605f24d56b74b4639a531dc1b23c374c302499a9af8e5	ELSA-2012-0745	ol5_u6_i386_base
	python-devel-2.4.3-43.el5.i386.rpm	06455fcbd1becce2c801726253147d7b67c9b030d7ef0abba1c55ced917fe7ff	ELSA-2012-0745	ol5_i386_latest
	python-devel-2.4.3-43.el5.i386.rpm	06455fcbd1becce2c801726253147d7b67c9b030d7ef0abba1c55ced917fe7ff	ELSA-2012-0745	ol5_u6_i386_base
	python-libs-2.4.3-43.el5.i386.rpm	41b3f7532f0f24f6ec75d4b429d9603e1ed288add0d66c8c8959b2ee8028d1c3	ELSA-2012-0745	ol5_i386_latest
	python-libs-2.4.3-43.el5.i386.rpm	41b3f7532f0f24f6ec75d4b429d9603e1ed288add0d66c8c8959b2ee8028d1c3	ELSA-2012-0745	ol5_u6_i386_base
	python-tools-2.4.3-43.el5.i386.rpm	cddbda4953d198f54aea9199a6b6bb9c7bb629c00d00ef52ef61821ac8582bcc	ELSA-2012-0745	ol5_i386_latest
	python-tools-2.4.3-43.el5.i386.rpm	cddbda4953d198f54aea9199a6b6bb9c7bb629c00d00ef52ef61821ac8582bcc	ELSA-2012-0745	ol5_u6_i386_base
	tkinter-2.4.3-43.el5.i386.rpm	798ab0f3375eed74a01fda06d0c57013595364e6b6774f24493e64787255c40b	ELSA-2012-0745	ol5_i386_latest
	tkinter-2.4.3-43.el5.i386.rpm	798ab0f3375eed74a01fda06d0c57013595364e6b6774f24493e64787255c40b	ELSA-2012-0745	ol5_u6_i386_base
Oracle Linux 5 (ia64)	python-2.4.3-43.el5.src.rpm	60b53667ea51cf566a6e0e5c223b8cae098ff8a6c3e3bfe06d9bd5dd93d2e559	ELSA-2012-0745	ol5_ia64_latest
	python-2.4.3-43.el5.src.rpm	60b53667ea51cf566a6e0e5c223b8cae098ff8a6c3e3bfe06d9bd5dd93d2e559	ELSA-2012-0745	ol5_u6_ia64_base
	python-2.4.3-43.el5.ia64.rpm	1be3a49ee7adde5b632d7b7ca2fdaf49a245f7ae71f3367298e161bd0b812bf3	ELSA-2012-0745	ol5_ia64_latest
	python-2.4.3-43.el5.ia64.rpm	1be3a49ee7adde5b632d7b7ca2fdaf49a245f7ae71f3367298e161bd0b812bf3	ELSA-2012-0745	ol5_u6_ia64_base
	python-devel-2.4.3-43.el5.ia64.rpm	f58c706e6e11de66dcb6b073f4d02c63bace553fa59fbab907407af87a5e0f98	ELSA-2012-0745	ol5_ia64_latest
	python-devel-2.4.3-43.el5.ia64.rpm	f58c706e6e11de66dcb6b073f4d02c63bace553fa59fbab907407af87a5e0f98	ELSA-2012-0745	ol5_u6_ia64_base
	python-libs-2.4.3-43.el5.ia64.rpm	3a58c03bd327c73f124da468868d556e77394296eb2d6ae136c4e1fdda47eecc	ELSA-2012-0745	ol5_ia64_latest
	python-libs-2.4.3-43.el5.ia64.rpm	3a58c03bd327c73f124da468868d556e77394296eb2d6ae136c4e1fdda47eecc	ELSA-2012-0745	ol5_u6_ia64_base
	python-tools-2.4.3-43.el5.ia64.rpm	23f696f50028f076cf712c20cc5837fd7aa533c9f001e3dd406569e8d0c54662	ELSA-2012-0745	ol5_ia64_latest
	python-tools-2.4.3-43.el5.ia64.rpm	23f696f50028f076cf712c20cc5837fd7aa533c9f001e3dd406569e8d0c54662	ELSA-2012-0745	ol5_u6_ia64_base
	tkinter-2.4.3-43.el5.ia64.rpm	b3ae10f7b037df617cfa59af062890c354b1da7af9dbfc90f9cc5eb2c0444ed4	ELSA-2012-0745	ol5_ia64_latest
	tkinter-2.4.3-43.el5.ia64.rpm	b3ae10f7b037df617cfa59af062890c354b1da7af9dbfc90f9cc5eb2c0444ed4	ELSA-2012-0745	ol5_u6_ia64_base
Oracle Linux 5 (x86_64)	python-2.4.3-43.el5.src.rpm	60b53667ea51cf566a6e0e5c223b8cae098ff8a6c3e3bfe06d9bd5dd93d2e559	ELSA-2012-0745	ol5_u6_x86_64_base
	python-2.4.3-43.el5.src.rpm	60b53667ea51cf566a6e0e5c223b8cae098ff8a6c3e3bfe06d9bd5dd93d2e559	ELSA-2012-0745	ol5_x86_64_latest
	python-2.4.3-43.el5.x86_64.rpm	f5024f0a5767b46c58b32d1b5e48842d70e3eea95cf71b9b8f880f2665762e38	ELSA-2012-0745	ol5_u6_x86_64_base
	python-2.4.3-43.el5.x86_64.rpm	f5024f0a5767b46c58b32d1b5e48842d70e3eea95cf71b9b8f880f2665762e38	ELSA-2012-0745	ol5_x86_64_latest
	python-devel-2.4.3-43.el5.i386.rpm	06455fcbd1becce2c801726253147d7b67c9b030d7ef0abba1c55ced917fe7ff	ELSA-2012-0745	ol5_u6_x86_64_base
	python-devel-2.4.3-43.el5.i386.rpm	06455fcbd1becce2c801726253147d7b67c9b030d7ef0abba1c55ced917fe7ff	ELSA-2012-0745	ol5_x86_64_latest
	python-devel-2.4.3-43.el5.x86_64.rpm	af6dfec671701a0c51926ddfcb89b2fe15225c27e1b2f0c7b1551b892569222e	ELSA-2012-0745	ol5_u6_x86_64_base
	python-devel-2.4.3-43.el5.x86_64.rpm	af6dfec671701a0c51926ddfcb89b2fe15225c27e1b2f0c7b1551b892569222e	ELSA-2012-0745	ol5_x86_64_latest
	python-libs-2.4.3-43.el5.x86_64.rpm	f1cd4d1201bef43a955a17250f8aa9d68f4b960ea0293ef72f99adc19edfee1a	ELSA-2012-0745	ol5_u6_x86_64_base
	python-libs-2.4.3-43.el5.x86_64.rpm	f1cd4d1201bef43a955a17250f8aa9d68f4b960ea0293ef72f99adc19edfee1a	ELSA-2012-0745	ol5_x86_64_latest
	python-tools-2.4.3-43.el5.x86_64.rpm	bc2a7aff50ba57fd5c9c0927cb2c26cbc3e8cc6c070b109cc3533d7a2f5c145b	ELSA-2012-0745	ol5_u6_x86_64_base
	python-tools-2.4.3-43.el5.x86_64.rpm	bc2a7aff50ba57fd5c9c0927cb2c26cbc3e8cc6c070b109cc3533d7a2f5c145b	ELSA-2012-0745	ol5_x86_64_latest
	tkinter-2.4.3-43.el5.x86_64.rpm	e0c5a4240d3736b6ce40b13a4a32d285ddc3c8c35311dfdeb7a096108e8dc859	ELSA-2012-0745	ol5_u6_x86_64_base
	tkinter-2.4.3-43.el5.x86_64.rpm	e0c5a4240d3736b6ce40b13a4a32d285ddc3c8c35311dfdeb7a096108e8dc859	ELSA-2012-0745	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team