OVMSA-2016-0099

OVMSA-2016-0099 - python security update

Type:SECURITY
Severity:MODERATE
Release Date:2016-08-18

Description


[2.6.6-66.0.1]
- Add Oracle Linux distribution in platform.py [orabug 21288328] (Keshav Sharma)

[2.6.6-66]
- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359161

[2.6.6-65]
- Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
Raise an error when STARTTLS fails (upstream patch)
- Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
Disabled HTTP header injections in httplib (upstream patch)
Resolves: rhbz#1346354


Related CVEs


CVE-2016-1000110

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle VM 3.3 (x86_64) python-2.6.6-66.0.1.el6_8.src.rpmf9ec39320fbc426ce14c2e60425fb30bOVMSA-2020-0036
python-2.6.6-66.0.1.el6_8.x86_64.rpm13696a0f0b1c19c050fe780702628650OVMSA-2020-0036
python-libs-2.6.6-66.0.1.el6_8.x86_64.rpm48ac2222b5d4efe758595b8218132455OVMSA-2020-0036
Oracle VM 3.4 (x86_64) python-2.6.6-66.0.1.el6_8.src.rpmf9ec39320fbc426ce14c2e60425fb30bOVMSA-2020-0036
python-2.6.6-66.0.1.el6_8.x86_64.rpm13696a0f0b1c19c050fe780702628650OVMSA-2020-0036
python-libs-2.6.6-66.0.1.el6_8.x86_64.rpm48ac2222b5d4efe758595b8218132455OVMSA-2020-0036



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete