CentOS Errata and Security Advisory CESA-2006:0713
Python is an interpreted, interactive, object-oriented programming language.
A flaw was discovered in the way that the Python repr() function handled
UTF-32/UCS-4 strings. If an application written in Python used the repr()
function on untrusted data, this could lead to a denial of service or
possibly allow the execution of arbitrary code with the privileges of the
Python application. (CVE-2006-4980)
In addition, this errata fixes a regression in the SimpleXMLRPCServer
backport for Red Hat Enterprise Linux 3 that was introduced with RHSA-2005:109.
Users of Python should upgrade to these updated packages, which contain a
backported patch to correct this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2006-October/075479.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075480.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075481.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075482.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075483.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075484.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075485.html
https://lists.centos.org/pipermail/centos-announce/2006-October/075486.html
Affected packages:
python
python-devel
python-docs
python-tools
tkinter
Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0713
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 3 | i386 | python | < 2.2.3-6.5 | python-2.2.3-6.5.i386.rpm |
CentOS | 3 | i386 | python-devel | < 2.2.3-6.5 | python-devel-2.2.3-6.5.i386.rpm |
CentOS | 3 | i386 | python-docs | < 2.2.3-6.5 | python-docs-2.2.3-6.5.i386.rpm |
CentOS | 3 | i386 | python-tools | < 2.2.3-6.5 | python-tools-2.2.3-6.5.i386.rpm |
CentOS | 3 | i386 | tkinter | < 2.2.3-6.5 | tkinter-2.2.3-6.5.i386.rpm |
CentOS | 3 | x86_64 | python | < 2.2.3-6.5 | python-2.2.3-6.5.x86_64.rpm |
CentOS | 3 | x86_64 | python-devel | < 2.2.3-6.5 | python-devel-2.2.3-6.5.x86_64.rpm |
CentOS | 3 | x86_64 | python-docs | < 2.2.3-6.5 | python-docs-2.2.3-6.5.x86_64.rpm |
CentOS | 3 | x86_64 | python-tools | < 2.2.3-6.5 | python-tools-2.2.3-6.5.x86_64.rpm |
CentOS | 3 | x86_64 | tkinter | < 2.2.3-6.5 | tkinter-2.2.3-6.5.x86_64.rpm |