Lucene search

K
oraclelinuxOracleELSA-2012-0745
HistoryJun 18, 2012 - 12:00 a.m.

python security update

2012-06-1800:00:00
Oracle
linux.oracle.com
12

0.007 Low

EPSS

Percentile

78.3%

[2.4.3-46.el5_8.2]

  • if hash randomization is enabled, also enable it within pyexpat
    Resolves: CVE-2012-0876
    [2.4.3-46.el5_8.1]
  • distutils.commands.register: create ~/.pypirc securely
    Resolves: CVE-2011-4944
  • send encoding in SimpleHTTPServer.list_directory to protect IE7 against
    potential XSS attacks
    Resolves: CVE-2011-4940
  • oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
    variable, to provide an opt-in way to protect against denial of service
    attacks due to hash collisions within the dict and set types
    Resolves: CVE-2012-1150