(RHSA-2006:0197) python security update

2006-03-0900:00:00

access.redhat.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

88.6%

JSON

Python is an interpreted, interactive, object-oriented programming language.

An integer overflow flaw was found in Python’s PCRE library that could be
triggered by a maliciously crafted regular expression. On systems that
accept arbitrary regular expressions from untrusted users, this could be
exploited to execute arbitrary code with the privileges of the application
using the library. The Common Vulnerabilities and Exposures project
assigned the name CVE-2005-2491 to this issue.

Users of Python should upgrade to these updated packages, which contain a
backported patch that is not vulnerable to this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanys390xpython-devel< 2.2.3-6.2python-devel-2.2.3-6.2.s390x.rpm
RedHatanyi386tkinter< 1.5.2-43.72.1tkinter-1.5.2-43.72.1.i386.rpm
RedHatanyx86_64python< 2.2.3-6.2python-2.2.3-6.2.x86_64.rpm
RedHatanys390python-tools< 2.2.3-6.2python-tools-2.2.3-6.2.s390.rpm
RedHatanys390python-devel< 2.3.4-14.2python-devel-2.3.4-14.2.s390.rpm
RedHatanyx86_64python-docs< 2.3.4-14.2python-docs-2.3.4-14.2.x86_64.rpm
RedHatanyia64tkinter< 2.3.4-14.2tkinter-2.3.4-14.2.ia64.rpm
RedHatanyppcpython-tools< 2.2.3-6.2python-tools-2.2.3-6.2.ppc.rpm
RedHatanyi386tkinter< 2.3.4-14.2tkinter-2.3.4-14.2.i386.rpm
RedHatanyi386python-tools< 2.2.3-6.2python-tools-2.2.3-6.2.i386.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	s390x	python-devel	< 2.2.3-6.2	python-devel-2.2.3-6.2.s390x.rpm
RedHat	any	i386	tkinter	< 1.5.2-43.72.1	tkinter-1.5.2-43.72.1.i386.rpm
RedHat	any	x86_64	python	< 2.2.3-6.2	python-2.2.3-6.2.x86_64.rpm
RedHat	any	s390	python-tools	< 2.2.3-6.2	python-tools-2.2.3-6.2.s390.rpm
RedHat	any	s390	python-devel	< 2.3.4-14.2	python-devel-2.3.4-14.2.s390.rpm
RedHat	any	x86_64	python-docs	< 2.3.4-14.2	python-docs-2.3.4-14.2.x86_64.rpm
RedHat	any	ia64	tkinter	< 2.3.4-14.2	tkinter-2.3.4-14.2.ia64.rpm
RedHat	any	ppc	python-tools	< 2.2.3-6.2	python-tools-2.2.3-6.2.ppc.rpm
RedHat	any	i386	tkinter	< 2.3.4-14.2	tkinter-2.3.4-14.2.i386.rpm
RedHat	any	i386	python-tools	< 2.2.3-6.2	python-tools-2.2.3-6.2.i386.rpm