Issued:
2013-02-20
Updated:
2013-02-20

RHBA-2013:0472 - Bug Fix Advisory

Synopsis

python-paste bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An updated python-paste package that fixes one bug is now available for Red Hat
Enterprise Linux 6.

Description

Python Paste provides middleware for building and running Python web
applications.

This update fixes the following bug:

  • Previously, the auth_tkt plugin used MD5 checksums, which are not FIPS

(Federal Information Processing Standard) compliant. Consequently, when FIPS
compliance mode was active on the system, auth_tkt failed. The auth_tkt plugin
has been set to use Secure Hash Algorithm (SHA) 256, which is FIPS-compliant,
instead of MD5 checksums. As a result, auth-tkt no longer fails in this
situation. (BZ#783158)

All users of python-paste are advised to upgrade to this updated package, which
fixes this bug.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 6

SRPM
python-paste-1.7.4-2.el6.src.rpm SHA-256: 5e5e0be4420b118a4232d3a9f4cd5bbee4a9b24fe835fe7330cce79d25086f29
x86_64
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0
i386
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
python-paste-1.7.4-2.el6.src.rpm SHA-256: 5e5e0be4420b118a4232d3a9f4cd5bbee4a9b24fe835fe7330cce79d25086f29
x86_64
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0
i386
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0

Red Hat Enterprise Linux Workstation 6

SRPM
python-paste-1.7.4-2.el6.src.rpm SHA-256: 5e5e0be4420b118a4232d3a9f4cd5bbee4a9b24fe835fe7330cce79d25086f29
x86_64
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0
i386
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
python-paste-1.7.4-2.el6.src.rpm SHA-256: 5e5e0be4420b118a4232d3a9f4cd5bbee4a9b24fe835fe7330cce79d25086f29
s390x
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0

Red Hat Enterprise Linux for Power, big endian 6

SRPM
python-paste-1.7.4-2.el6.src.rpm SHA-256: 5e5e0be4420b118a4232d3a9f4cd5bbee4a9b24fe835fe7330cce79d25086f29
ppc64
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0

Red Hat Enterprise Linux Server from RHUI 6

SRPM
python-paste-1.7.4-2.el6.src.rpm SHA-256: 5e5e0be4420b118a4232d3a9f4cd5bbee4a9b24fe835fe7330cce79d25086f29
x86_64
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0
i386
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
python-paste-1.7.4-2.el6.src.rpm SHA-256: 5e5e0be4420b118a4232d3a9f4cd5bbee4a9b24fe835fe7330cce79d25086f29
s390x
python-paste-1.7.4-2.el6.noarch.rpm SHA-256: 805717dafef8c3da45c17f7efa0f28a0a18986e3aa4505eb766d9d38d0e345a0

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.