OVMSA-2016-0099

OVMSA-2016-0099 - python security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2016-08-18

Description

[2.6.6-66.0.1]
- Add Oracle Linux distribution in platform.py [orabug 21288328] (Keshav Sharma)

[2.6.6-66]
- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359161

[2.6.6-65]
- Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
Raise an error when STARTTLS fails (upstream patch)
- Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
Disabled HTTP header injections in httplib (upstream patch)
Resolves: rhbz#1346354

Related CVEs

CVE-2016-1000110

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle VM 3.3 (x86_64)	python-2.6.6-66.0.1.el6_8.src.rpm	d29e13da00a7ce247007c17a106dcc27cff53c1e376543df4211e84830cec2bb	OVMSA-2020-0036	ovm3_x86_64_3.3_patch
	python-2.6.6-66.0.1.el6_8.x86_64.rpm	03e25932af57fcddba594c4dd62d1bf1c0b0816e3c65a627350c7301db6c4ace	OVMSA-2020-0036	ovm3_x86_64_3.3_patch
	python-libs-2.6.6-66.0.1.el6_8.x86_64.rpm	d1bcb427b9fe4480e504d02e8ff8ed669ff25b5acf4dd12c32fe40065247719e	OVMSA-2020-0036	ovm3_x86_64_3.3_patch
Oracle VM 3.4 (x86_64)	python-2.6.6-66.0.1.el6_8.src.rpm	d29e13da00a7ce247007c17a106dcc27cff53c1e376543df4211e84830cec2bb	OVMSA-2020-0036	ovm34_x86_64_latest
	python-2.6.6-66.0.1.el6_8.x86_64.rpm	03e25932af57fcddba594c4dd62d1bf1c0b0816e3c65a627350c7301db6c4ace	OVMSA-2020-0036	ovm34_x86_64_latest
	python-libs-2.6.6-66.0.1.el6_8.x86_64.rpm	d1bcb427b9fe4480e504d02e8ff8ed669ff25b5acf4dd12c32fe40065247719e	OVMSA-2020-0036	ovm34_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team