ELSA-2012-0745

ELSA-2012-0745 - python security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2012-06-18

Description

[2.4.3-46.el5_8.2]
- if hash randomization is enabled, also enable it within pyexpat
Resolves: CVE-2012-0876

[2.4.3-46.el5_8.1]
- distutils.commands.register: create ~/.pypirc securely
Resolves: CVE-2011-4944
- send encoding in SimpleHTTPServer.list_directory to protect IE7 against
potential XSS attacks
Resolves: CVE-2011-4940
- oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
variable, to provide an opt-in way to protect against denial of service
attacks due to hash collisions within the dict and set types
Resolves: CVE-2012-1150

Related CVEs

CVE-2011-4940

CVE-2011-4944

CVE-2012-1150

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	python-2.4.3-46.el5_8.2.src.rpm	460d006650f9ca7e2743e2da14b2c050	-
	python-2.4.3-46.el5_8.2.i386.rpm	ca43e4cbc8cbe73a4eac385fcfe8ba05	-
	python-devel-2.4.3-46.el5_8.2.i386.rpm	4683a87c465b0b4b534487f368a147ef	-
	python-libs-2.4.3-46.el5_8.2.i386.rpm	043661cbc372d00b31669561cd4fe396	-
	python-tools-2.4.3-46.el5_8.2.i386.rpm	d2615a6bacbc034dd76004f7a154d53b	-
	tkinter-2.4.3-46.el5_8.2.i386.rpm	b8027b1ceaf5b186d8af6df4eb6503b2	-
Oracle Linux 5 (ia64)	python-2.4.3-46.el5_8.2.src.rpm	460d006650f9ca7e2743e2da14b2c050	-
	python-2.4.3-46.el5_8.2.ia64.rpm	e1dedfc9e24d67d067fc0a6d1230893b	-
	python-devel-2.4.3-46.el5_8.2.ia64.rpm	069aca490bfd9eac335af2be0654cee6	-
	python-libs-2.4.3-46.el5_8.2.i386.rpm	043661cbc372d00b31669561cd4fe396	-
	python-libs-2.4.3-46.el5_8.2.ia64.rpm	629f90c231d7eba29f72d46fb436bf56	-
	python-tools-2.4.3-46.el5_8.2.ia64.rpm	fc3776d349d8c54830f4ceac7de5ba4c	-
	tkinter-2.4.3-46.el5_8.2.ia64.rpm	fd46f783ef1d606213b0125a90c0c1d3	-
Oracle Linux 5 (x86_64)	python-2.4.3-46.el5_8.2.src.rpm	460d006650f9ca7e2743e2da14b2c050	-
	python-2.4.3-46.el5_8.2.x86_64.rpm	01eb55911471b979084dbc383f86dd74	-
	python-devel-2.4.3-46.el5_8.2.i386.rpm	4683a87c465b0b4b534487f368a147ef	-
	python-devel-2.4.3-46.el5_8.2.x86_64.rpm	a67ceffe0640929239e49fcae815b6ef	-
	python-libs-2.4.3-46.el5_8.2.x86_64.rpm	88a443ee48bf5f85d420aff80f121a3d	-
	python-tools-2.4.3-46.el5_8.2.x86_64.rpm	b812dfdda4ed62ab8f44570ccc9515ae	-
	tkinter-2.4.3-46.el5_8.2.x86_64.rpm	0762cdc381636513ec2657277a70e8e6	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team