python, tkinter security update

2006-03-0921:29:49

CentOS Project

lists.centos.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.6%

JSON

CentOS Errata and Security Advisory CESA-2006:0197

Python is an interpreted, interactive, object-oriented programming language.

An integer overflow flaw was found in Python’s PCRE library that could be
triggered by a maliciously crafted regular expression. On systems that
accept arbitrary regular expressions from untrusted users, this could be
exploited to execute arbitrary code with the privileges of the application
using the library. The Common Vulnerabilities and Exposures project
assigned the name CVE-2005-2491 to this issue.

Users of Python should upgrade to these updated packages, which contain a
backported patch that is not vulnerable to this issue.

Affected packages:
python
python-devel
python-docs
python-tools
tkinter

Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0197

OSVersionArchitecturePackageVersionFilename
CentOS4ia64python< 2.3.4-14.2python-2.3.4-14.2.ia64.rpm
CentOS4ia64python-devel< 2.3.4-14.2python-devel-2.3.4-14.2.ia64.rpm
CentOS4ia64python-docs< 2.3.4-14.2python-docs-2.3.4-14.2.ia64.rpm
CentOS4ia64python-tools< 2.3.4-14.2python-tools-2.3.4-14.2.ia64.rpm
CentOS4ia64tkinter< 2.3.4-14.2tkinter-2.3.4-14.2.ia64.rpm
CentOS3ia64python< 2.2.3-6.2python-2.2.3-6.2.ia64.rpm
CentOS3ia64python-devel< 2.2.3-6.2python-devel-2.2.3-6.2.ia64.rpm
CentOS3ia64python-docs< 2.2.3-6.2python-docs-2.2.3-6.2.ia64.rpm
CentOS3ia64python-tools< 2.2.3-6.2python-tools-2.2.3-6.2.ia64.rpm
CentOS3ia64tkinter< 2.2.3-6.2tkinter-2.2.3-6.2.ia64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	4	ia64	python	< 2.3.4-14.2	python-2.3.4-14.2.ia64.rpm
CentOS	4	ia64	python-devel	< 2.3.4-14.2	python-devel-2.3.4-14.2.ia64.rpm
CentOS	4	ia64	python-docs	< 2.3.4-14.2	python-docs-2.3.4-14.2.ia64.rpm
CentOS	4	ia64	python-tools	< 2.3.4-14.2	python-tools-2.3.4-14.2.ia64.rpm
CentOS	4	ia64	tkinter	< 2.3.4-14.2	tkinter-2.3.4-14.2.ia64.rpm
CentOS	3	ia64	python	< 2.2.3-6.2	python-2.2.3-6.2.ia64.rpm
CentOS	3	ia64	python-devel	< 2.2.3-6.2	python-devel-2.2.3-6.2.ia64.rpm
CentOS	3	ia64	python-docs	< 2.2.3-6.2	python-docs-2.2.3-6.2.ia64.rpm
CentOS	3	ia64	python-tools	< 2.2.3-6.2	python-tools-2.2.3-6.2.ia64.rpm
CentOS	3	ia64	tkinter	< 2.2.3-6.2	tkinter-2.2.3-6.2.ia64.rpm