Lucene search

K
centosCentOS ProjectCESA-2006:0713
HistoryOct 10, 2006 - 8:17 a.m.

python, tkinter security update

2006-10-1008:17:55
CentOS Project
lists.centos.org
37

0.012 Low

EPSS

Percentile

85.1%

CentOS Errata and Security Advisory CESA-2006:0713

Python is an interpreted, interactive, object-oriented programming language.

A flaw was discovered in the way that the Python repr() function handled
UTF-32/UCS-4 strings. If an application written in Python used the repr()
function on untrusted data, this could lead to a denial of service or
possibly allow the execution of arbitrary code with the privileges of the
Python application. (CVE-2006-4980)

In addition, this errata fixes a regression in the SimpleXMLRPCServer
backport for Red Hat Enterprise Linux 3 that was introduced with RHSA-2005:109.

Users of Python should upgrade to these updated packages, which contain a
backported patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2006-October/075479.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075480.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075481.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075482.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075483.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075484.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075485.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075486.html

Affected packages:
python
python-devel
python-docs
python-tools
tkinter

Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0713