Issued:
2006-03-09
Updated:
2006-03-09

RHSA-2006:0197 - Security Advisory

Synopsis

python security update

Type/Severity

Security Advisory: Moderate

Topic

Updated Python packages are now available to correct a security issue.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

Python is an interpreted, interactive, object-oriented programming language.

An integer overflow flaw was found in Python's PCRE library that could be
triggered by a maliciously crafted regular expression. On systems that
accept arbitrary regular expressions from untrusted users, this could be
exploited to execute arbitrary code with the privileges of the application
using the library. The Common Vulnerabilities and Exposures project
assigned the name CVE-2005-2491 to this issue.

Users of Python should upgrade to these updated packages, which contain a
backported patch that is not vulnerable to this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Server 2 ia64
  • Red Hat Enterprise Linux Server 2 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Workstation 2 ia64
  • Red Hat Enterprise Linux Workstation 2 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

CVEs

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
x86_64
python-2.3.4-14.2.x86_64.rpm SHA-256: f6fe04d8ea7267c12ca41a316d4b4818500e2aa7cd2018967083a86a58dd5ced
python-2.3.4-14.2.x86_64.rpm SHA-256: f6fe04d8ea7267c12ca41a316d4b4818500e2aa7cd2018967083a86a58dd5ced
python-devel-2.3.4-14.2.x86_64.rpm SHA-256: f340ad9ece373662bc6f6a2e55be2a5ea536e1a01ad21b7b91d6c45be46b4d8c
python-devel-2.3.4-14.2.x86_64.rpm SHA-256: f340ad9ece373662bc6f6a2e55be2a5ea536e1a01ad21b7b91d6c45be46b4d8c
python-docs-2.3.4-14.2.x86_64.rpm SHA-256: 2294c3c671b53e84b6289767793d23ced1b6928eb33a0e176e6d366f79372934
python-docs-2.3.4-14.2.x86_64.rpm SHA-256: 2294c3c671b53e84b6289767793d23ced1b6928eb33a0e176e6d366f79372934
python-tools-2.3.4-14.2.x86_64.rpm SHA-256: ee51b2f77b0c8f521d31f3a21675b223a32f85a04dcd3fce5a6f90e81fabd664
python-tools-2.3.4-14.2.x86_64.rpm SHA-256: ee51b2f77b0c8f521d31f3a21675b223a32f85a04dcd3fce5a6f90e81fabd664
tkinter-2.3.4-14.2.x86_64.rpm SHA-256: 696c312a87342d852a043b9e8de9a5c971ad7c7d37274304ac82c1dba2589426
tkinter-2.3.4-14.2.x86_64.rpm SHA-256: 696c312a87342d852a043b9e8de9a5c971ad7c7d37274304ac82c1dba2589426
ia64
python-2.3.4-14.2.ia64.rpm SHA-256: 31fe5606e56a92fef3917e69f223a5ab0565b8dee1593d29c5bf8e4c2088e703
python-2.3.4-14.2.ia64.rpm SHA-256: 31fe5606e56a92fef3917e69f223a5ab0565b8dee1593d29c5bf8e4c2088e703
python-devel-2.3.4-14.2.ia64.rpm SHA-256: af6e44ca819dd6121acb70928b9af7b1bcb71857e7328368a1bb2fc1b3bdf4ec
python-devel-2.3.4-14.2.ia64.rpm SHA-256: af6e44ca819dd6121acb70928b9af7b1bcb71857e7328368a1bb2fc1b3bdf4ec
python-docs-2.3.4-14.2.ia64.rpm SHA-256: 1bb566d9dda0539af528901c5ec53e3a43615fdc439e92e44a0e20cd493fe032
python-docs-2.3.4-14.2.ia64.rpm SHA-256: 1bb566d9dda0539af528901c5ec53e3a43615fdc439e92e44a0e20cd493fe032
python-tools-2.3.4-14.2.ia64.rpm SHA-256: dad050f58f4e178fdc36a392de335710a8d759e474f70676f150e318d813ce0a
python-tools-2.3.4-14.2.ia64.rpm SHA-256: dad050f58f4e178fdc36a392de335710a8d759e474f70676f150e318d813ce0a
tkinter-2.3.4-14.2.ia64.rpm SHA-256: 51a9a467b9e81116e7c0ba860d4cd70858a45aad13ea2e55d009df7449099b16
tkinter-2.3.4-14.2.ia64.rpm SHA-256: 51a9a467b9e81116e7c0ba860d4cd70858a45aad13ea2e55d009df7449099b16
i386
python-2.3.4-14.2.i386.rpm SHA-256: 016e4336db09ce5fd0090bca8fff09550f11ff10cff7cfd8be10a688e4ad89be
python-2.3.4-14.2.i386.rpm SHA-256: 016e4336db09ce5fd0090bca8fff09550f11ff10cff7cfd8be10a688e4ad89be
python-devel-2.3.4-14.2.i386.rpm SHA-256: f884871429172eb6bbd9f461b014acc6a6659a3b29263d7c8438648ee9d7e307
python-devel-2.3.4-14.2.i386.rpm SHA-256: f884871429172eb6bbd9f461b014acc6a6659a3b29263d7c8438648ee9d7e307
python-docs-2.3.4-14.2.i386.rpm SHA-256: dbd4bbc1a94f2fa2181c4dd5b14ceef47feb8fb107aa6be7db3b124355cc6247
python-docs-2.3.4-14.2.i386.rpm SHA-256: dbd4bbc1a94f2fa2181c4dd5b14ceef47feb8fb107aa6be7db3b124355cc6247
python-tools-2.3.4-14.2.i386.rpm SHA-256: a32ed67aac6aa870e1897cc329beb4e727499cfee4d44eb805a4c578486c50b8
python-tools-2.3.4-14.2.i386.rpm SHA-256: a32ed67aac6aa870e1897cc329beb4e727499cfee4d44eb805a4c578486c50b8
tkinter-2.3.4-14.2.i386.rpm SHA-256: 1d2af42af7c324abed0f46cc7ae98f409ad52595f52552734cc684223e80ea77
tkinter-2.3.4-14.2.i386.rpm SHA-256: 1d2af42af7c324abed0f46cc7ae98f409ad52595f52552734cc684223e80ea77

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
python-2.3.4-14.2.x86_64.rpm SHA-256: f6fe04d8ea7267c12ca41a316d4b4818500e2aa7cd2018967083a86a58dd5ced
python-devel-2.3.4-14.2.x86_64.rpm SHA-256: f340ad9ece373662bc6f6a2e55be2a5ea536e1a01ad21b7b91d6c45be46b4d8c
python-docs-2.3.4-14.2.x86_64.rpm SHA-256: 2294c3c671b53e84b6289767793d23ced1b6928eb33a0e176e6d366f79372934
python-tools-2.3.4-14.2.x86_64.rpm SHA-256: ee51b2f77b0c8f521d31f3a21675b223a32f85a04dcd3fce5a6f90e81fabd664
tkinter-2.3.4-14.2.x86_64.rpm SHA-256: 696c312a87342d852a043b9e8de9a5c971ad7c7d37274304ac82c1dba2589426
ia64
python-2.3.4-14.2.ia64.rpm SHA-256: 31fe5606e56a92fef3917e69f223a5ab0565b8dee1593d29c5bf8e4c2088e703
python-devel-2.3.4-14.2.ia64.rpm SHA-256: af6e44ca819dd6121acb70928b9af7b1bcb71857e7328368a1bb2fc1b3bdf4ec
python-docs-2.3.4-14.2.ia64.rpm SHA-256: 1bb566d9dda0539af528901c5ec53e3a43615fdc439e92e44a0e20cd493fe032
python-tools-2.3.4-14.2.ia64.rpm SHA-256: dad050f58f4e178fdc36a392de335710a8d759e474f70676f150e318d813ce0a
tkinter-2.3.4-14.2.ia64.rpm SHA-256: 51a9a467b9e81116e7c0ba860d4cd70858a45aad13ea2e55d009df7449099b16
i386
python-2.3.4-14.2.i386.rpm SHA-256: 016e4336db09ce5fd0090bca8fff09550f11ff10cff7cfd8be10a688e4ad89be
python-devel-2.3.4-14.2.i386.rpm SHA-256: f884871429172eb6bbd9f461b014acc6a6659a3b29263d7c8438648ee9d7e307
python-docs-2.3.4-14.2.i386.rpm SHA-256: dbd4bbc1a94f2fa2181c4dd5b14ceef47feb8fb107aa6be7db3b124355cc6247
python-tools-2.3.4-14.2.i386.rpm SHA-256: a32ed67aac6aa870e1897cc329beb4e727499cfee4d44eb805a4c578486c50b8
tkinter-2.3.4-14.2.i386.rpm SHA-256: 1d2af42af7c324abed0f46cc7ae98f409ad52595f52552734cc684223e80ea77

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
python-2.3.4-14.2.x86_64.rpm SHA-256: f6fe04d8ea7267c12ca41a316d4b4818500e2aa7cd2018967083a86a58dd5ced
python-devel-2.3.4-14.2.x86_64.rpm SHA-256: f340ad9ece373662bc6f6a2e55be2a5ea536e1a01ad21b7b91d6c45be46b4d8c
python-docs-2.3.4-14.2.x86_64.rpm SHA-256: 2294c3c671b53e84b6289767793d23ced1b6928eb33a0e176e6d366f79372934
python-tools-2.3.4-14.2.x86_64.rpm SHA-256: ee51b2f77b0c8f521d31f3a21675b223a32f85a04dcd3fce5a6f90e81fabd664
tkinter-2.3.4-14.2.x86_64.rpm SHA-256: 696c312a87342d852a043b9e8de9a5c971ad7c7d37274304ac82c1dba2589426
i386
python-2.3.4-14.2.i386.rpm SHA-256: 016e4336db09ce5fd0090bca8fff09550f11ff10cff7cfd8be10a688e4ad89be
python-devel-2.3.4-14.2.i386.rpm SHA-256: f884871429172eb6bbd9f461b014acc6a6659a3b29263d7c8438648ee9d7e307
python-docs-2.3.4-14.2.i386.rpm SHA-256: dbd4bbc1a94f2fa2181c4dd5b14ceef47feb8fb107aa6be7db3b124355cc6247
python-tools-2.3.4-14.2.i386.rpm SHA-256: a32ed67aac6aa870e1897cc329beb4e727499cfee4d44eb805a4c578486c50b8
tkinter-2.3.4-14.2.i386.rpm SHA-256: 1d2af42af7c324abed0f46cc7ae98f409ad52595f52552734cc684223e80ea77

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
python-2.3.4-14.2.s390x.rpm SHA-256: 9d4eacbcdf58b15d2632c49ad95e06d8f6337dcdd55439eb43a86a068e77fd8c
python-devel-2.3.4-14.2.s390x.rpm SHA-256: 8d579f03c75e69ba2b9e1e975a0cc01f67bd0fb04d35e4788e14822e169eb467
python-docs-2.3.4-14.2.s390x.rpm SHA-256: 70647f14870e6397982e0a41e2cbddc52eee81c9f351cdbada03e1603f9f2357
python-tools-2.3.4-14.2.s390x.rpm SHA-256: 0b53fabb1718e975f977e8181c26a509f83c7a0925c089fbe253ac5954db6be6
tkinter-2.3.4-14.2.s390x.rpm SHA-256: cdf92e2b3d3d8669c73fa5b7d4e899e7f473f3d45f77a1f06ba478c046d82dde
s390
python-2.3.4-14.2.s390.rpm SHA-256: a4f8ac7d8f312f54b32e776c761499a30aea5e50579c2f00c2672c048a2a4daa
python-devel-2.3.4-14.2.s390.rpm SHA-256: 47bdf0b7e6da873daf5f5d9ae642ea0bae0a6cc57ec6500510bf39410c70775a
python-docs-2.3.4-14.2.s390.rpm SHA-256: 292c114f1b453d7f77f5a507706bc7190dd3b911dea3c06a39772ad07901233b
python-tools-2.3.4-14.2.s390.rpm SHA-256: d829d7a4e50ba69a5b99e98b7d685cc8b74846b8a92f8acef861372eb733cf96
tkinter-2.3.4-14.2.s390.rpm SHA-256: 66bd70d8f96543eb6c6d5dfbd0984db1722e550e2b465776df37fe31cee5ee35

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
python-2.3.4-14.2.ppc.rpm SHA-256: 6200c0e4147b20720d630c88000a5ead2426677c855b5c49f49142f23be020d3
python-devel-2.3.4-14.2.ppc.rpm SHA-256: 2569a9d1040effe58e41f106c113759e197ff3cd51ff5a6d1793e814d385ea81
python-docs-2.3.4-14.2.ppc.rpm SHA-256: 9a8b464f44e60a798cd306a9c3f102900e0a99a266f8fc0c7084bec047af4747
python-tools-2.3.4-14.2.ppc.rpm SHA-256: e577b598d5692d3d3998692eae181227fd223ba70368e3388ce329e72e96c942
tkinter-2.3.4-14.2.ppc.rpm SHA-256: 708a91adc5fff1c2fca503563c03a87abde84ac35ffa4c8d1579926210c89ac7

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.