Issued:
2006-10-09
Updated:
2006-10-09

RHSA-2006:0713 - Security Advisory

Synopsis

python security update

Type/Severity

Security Advisory: Important

Topic

Updated Python packages are now available to correct a security issue in
Red Hat Enterprise Linux 3 and 4.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

Python is an interpreted, interactive, object-oriented programming language.

A flaw was discovered in the way that the Python repr() function handled
UTF-32/UCS-4 strings. If an application written in Python used the repr()
function on untrusted data, this could lead to a denial of service or
possibly allow the execution of arbitrary code with the privileges of the
Python application. (CVE-2006-4980)

In addition, this errata fixes a regression in the SimpleXMLRPCServer
backport for Red Hat Enterprise Linux 3 that was introduced with RHSA-2005:109.

Users of Python should upgrade to these updated packages, which contain a
backported patch to correct this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

  • BZ - 160418 - Error in RHEL3-U4-errata python python-2.2-xmlfix.patch
  • BZ - 208162 - CVE-2006-4980 repr unicode buffer overflow

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
python-2.3.4-14.3.src.rpm SHA-256: c31ca5342b423755111997a9e6cd44d3ba9cbef8585176abe5deec5940d3c23e
x86_64
python-2.3.4-14.3.x86_64.rpm SHA-256: 26d248307df2c506af957d4cdd7cc9f75433ff8c622ab27d761cab37310b689d
python-2.3.4-14.3.x86_64.rpm SHA-256: 26d248307df2c506af957d4cdd7cc9f75433ff8c622ab27d761cab37310b689d
python-devel-2.3.4-14.3.x86_64.rpm SHA-256: 433afea73e44407d822f4258a37e81d6c928e8c0646986281f35bca20d91dff9
python-devel-2.3.4-14.3.x86_64.rpm SHA-256: 433afea73e44407d822f4258a37e81d6c928e8c0646986281f35bca20d91dff9
python-docs-2.3.4-14.3.x86_64.rpm SHA-256: 8c64a369386c0be83650a3b765c310811861daaf8263a689ee65853a3b6b9b5e
python-docs-2.3.4-14.3.x86_64.rpm SHA-256: 8c64a369386c0be83650a3b765c310811861daaf8263a689ee65853a3b6b9b5e
python-tools-2.3.4-14.3.x86_64.rpm SHA-256: 38f83b83a853830ed88654800863ae586665e9839af8bf5eb5c01979c02e1012
python-tools-2.3.4-14.3.x86_64.rpm SHA-256: 38f83b83a853830ed88654800863ae586665e9839af8bf5eb5c01979c02e1012
tkinter-2.3.4-14.3.x86_64.rpm SHA-256: 632104aeed527a8034061ff810c595c5066ca8b78d9c1d55f73a5184b29aad3a
tkinter-2.3.4-14.3.x86_64.rpm SHA-256: 632104aeed527a8034061ff810c595c5066ca8b78d9c1d55f73a5184b29aad3a
ia64
python-2.3.4-14.3.ia64.rpm SHA-256: ef1d92d35d82bc9227dafee6b7aa8095b2ad0078c5629d3e22874b725c5d1aeb
python-2.3.4-14.3.ia64.rpm SHA-256: ef1d92d35d82bc9227dafee6b7aa8095b2ad0078c5629d3e22874b725c5d1aeb
python-devel-2.3.4-14.3.ia64.rpm SHA-256: 346af3cc37e51946cfa5e6afb515ecb2fadca8d5c03aed0ac52e17cd16a8eca6
python-devel-2.3.4-14.3.ia64.rpm SHA-256: 346af3cc37e51946cfa5e6afb515ecb2fadca8d5c03aed0ac52e17cd16a8eca6
python-docs-2.3.4-14.3.ia64.rpm SHA-256: 47484b701f679b789c55a27dd1fc20d3b1b6789f2945d023a8dfc4a90084c45a
python-docs-2.3.4-14.3.ia64.rpm SHA-256: 47484b701f679b789c55a27dd1fc20d3b1b6789f2945d023a8dfc4a90084c45a
python-tools-2.3.4-14.3.ia64.rpm SHA-256: 16dad492adf5abd1107f8b37324621431705e1d81b28affea46aa59eec9fe227
python-tools-2.3.4-14.3.ia64.rpm SHA-256: 16dad492adf5abd1107f8b37324621431705e1d81b28affea46aa59eec9fe227
tkinter-2.3.4-14.3.ia64.rpm SHA-256: 9052d4fa4c2ddc0caf652ebd090adf11d77ea964cb51633f70e71775bccc304c
tkinter-2.3.4-14.3.ia64.rpm SHA-256: 9052d4fa4c2ddc0caf652ebd090adf11d77ea964cb51633f70e71775bccc304c
i386
python-2.3.4-14.3.i386.rpm SHA-256: 9d8b7ef2838b955c7fb288aa469b6b20799f403fae4801aa52c833e36d0c5694
python-2.3.4-14.3.i386.rpm SHA-256: 9d8b7ef2838b955c7fb288aa469b6b20799f403fae4801aa52c833e36d0c5694
python-devel-2.3.4-14.3.i386.rpm SHA-256: 7f7802371e06dd9e8bf07a8ff3d3ad5378e50f1439c9d023ff819c688196f87a
python-devel-2.3.4-14.3.i386.rpm SHA-256: 7f7802371e06dd9e8bf07a8ff3d3ad5378e50f1439c9d023ff819c688196f87a
python-docs-2.3.4-14.3.i386.rpm SHA-256: 3f41cd9d78db527620d64226204200756fcf65140a9100935f8363b62bcbb11b
python-docs-2.3.4-14.3.i386.rpm SHA-256: 3f41cd9d78db527620d64226204200756fcf65140a9100935f8363b62bcbb11b
python-tools-2.3.4-14.3.i386.rpm SHA-256: 375d576e4771b4a9b3e9b828fc608b52ce9950c2a506bf9f3f474ef6806cd87d
python-tools-2.3.4-14.3.i386.rpm SHA-256: 375d576e4771b4a9b3e9b828fc608b52ce9950c2a506bf9f3f474ef6806cd87d
tkinter-2.3.4-14.3.i386.rpm SHA-256: 87693e5d4222cff2d1bdddd7484861ba2e6b741e39b7a37ffee38e2c5ab8fd41
tkinter-2.3.4-14.3.i386.rpm SHA-256: 87693e5d4222cff2d1bdddd7484861ba2e6b741e39b7a37ffee38e2c5ab8fd41

Red Hat Enterprise Linux Workstation 4

SRPM
python-2.3.4-14.3.src.rpm SHA-256: c31ca5342b423755111997a9e6cd44d3ba9cbef8585176abe5deec5940d3c23e
x86_64
python-2.3.4-14.3.x86_64.rpm SHA-256: 26d248307df2c506af957d4cdd7cc9f75433ff8c622ab27d761cab37310b689d
python-devel-2.3.4-14.3.x86_64.rpm SHA-256: 433afea73e44407d822f4258a37e81d6c928e8c0646986281f35bca20d91dff9
python-docs-2.3.4-14.3.x86_64.rpm SHA-256: 8c64a369386c0be83650a3b765c310811861daaf8263a689ee65853a3b6b9b5e
python-tools-2.3.4-14.3.x86_64.rpm SHA-256: 38f83b83a853830ed88654800863ae586665e9839af8bf5eb5c01979c02e1012
tkinter-2.3.4-14.3.x86_64.rpm SHA-256: 632104aeed527a8034061ff810c595c5066ca8b78d9c1d55f73a5184b29aad3a
ia64
python-2.3.4-14.3.ia64.rpm SHA-256: ef1d92d35d82bc9227dafee6b7aa8095b2ad0078c5629d3e22874b725c5d1aeb
python-devel-2.3.4-14.3.ia64.rpm SHA-256: 346af3cc37e51946cfa5e6afb515ecb2fadca8d5c03aed0ac52e17cd16a8eca6
python-docs-2.3.4-14.3.ia64.rpm SHA-256: 47484b701f679b789c55a27dd1fc20d3b1b6789f2945d023a8dfc4a90084c45a
python-tools-2.3.4-14.3.ia64.rpm SHA-256: 16dad492adf5abd1107f8b37324621431705e1d81b28affea46aa59eec9fe227
tkinter-2.3.4-14.3.ia64.rpm SHA-256: 9052d4fa4c2ddc0caf652ebd090adf11d77ea964cb51633f70e71775bccc304c
i386
python-2.3.4-14.3.i386.rpm SHA-256: 9d8b7ef2838b955c7fb288aa469b6b20799f403fae4801aa52c833e36d0c5694
python-devel-2.3.4-14.3.i386.rpm SHA-256: 7f7802371e06dd9e8bf07a8ff3d3ad5378e50f1439c9d023ff819c688196f87a
python-docs-2.3.4-14.3.i386.rpm SHA-256: 3f41cd9d78db527620d64226204200756fcf65140a9100935f8363b62bcbb11b
python-tools-2.3.4-14.3.i386.rpm SHA-256: 375d576e4771b4a9b3e9b828fc608b52ce9950c2a506bf9f3f474ef6806cd87d
tkinter-2.3.4-14.3.i386.rpm SHA-256: 87693e5d4222cff2d1bdddd7484861ba2e6b741e39b7a37ffee38e2c5ab8fd41

Red Hat Enterprise Linux Desktop 4

SRPM
python-2.3.4-14.3.src.rpm SHA-256: c31ca5342b423755111997a9e6cd44d3ba9cbef8585176abe5deec5940d3c23e
x86_64
python-2.3.4-14.3.x86_64.rpm SHA-256: 26d248307df2c506af957d4cdd7cc9f75433ff8c622ab27d761cab37310b689d
python-devel-2.3.4-14.3.x86_64.rpm SHA-256: 433afea73e44407d822f4258a37e81d6c928e8c0646986281f35bca20d91dff9
python-docs-2.3.4-14.3.x86_64.rpm SHA-256: 8c64a369386c0be83650a3b765c310811861daaf8263a689ee65853a3b6b9b5e
python-tools-2.3.4-14.3.x86_64.rpm SHA-256: 38f83b83a853830ed88654800863ae586665e9839af8bf5eb5c01979c02e1012
tkinter-2.3.4-14.3.x86_64.rpm SHA-256: 632104aeed527a8034061ff810c595c5066ca8b78d9c1d55f73a5184b29aad3a
i386
python-2.3.4-14.3.i386.rpm SHA-256: 9d8b7ef2838b955c7fb288aa469b6b20799f403fae4801aa52c833e36d0c5694
python-devel-2.3.4-14.3.i386.rpm SHA-256: 7f7802371e06dd9e8bf07a8ff3d3ad5378e50f1439c9d023ff819c688196f87a
python-docs-2.3.4-14.3.i386.rpm SHA-256: 3f41cd9d78db527620d64226204200756fcf65140a9100935f8363b62bcbb11b
python-tools-2.3.4-14.3.i386.rpm SHA-256: 375d576e4771b4a9b3e9b828fc608b52ce9950c2a506bf9f3f474ef6806cd87d
tkinter-2.3.4-14.3.i386.rpm SHA-256: 87693e5d4222cff2d1bdddd7484861ba2e6b741e39b7a37ffee38e2c5ab8fd41

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
python-2.3.4-14.3.src.rpm SHA-256: c31ca5342b423755111997a9e6cd44d3ba9cbef8585176abe5deec5940d3c23e
s390x
python-2.3.4-14.3.s390x.rpm SHA-256: 48d2c4b7d28b8ee7a1991577e5c858b28d6a2d6e7479854c21fb03b3495f099e
python-devel-2.3.4-14.3.s390x.rpm SHA-256: 1d285021b5c091d66e42ed481fb9b4b194780e4da44740198eb0e0bda2e30a23
python-docs-2.3.4-14.3.s390x.rpm SHA-256: 64680a7c6fe0e78554847a5d98197188f8ca316dd6dd386e00703759868911a3
python-tools-2.3.4-14.3.s390x.rpm SHA-256: 96c7bf6773dc55e90a8c60562d204eddb52ad1268f3ba0e3fbd1d9ae0f5efef3
tkinter-2.3.4-14.3.s390x.rpm SHA-256: 1673874556cfb3c8da26d6b3eecc75e67ebe8fd5f243de9dc24f4fa358e15e33
s390
python-2.3.4-14.3.s390.rpm SHA-256: ae5dbf373d67a633d772b65f96dce0db98a2f8af618ac6b7661f4b98b6d5e4ec
python-devel-2.3.4-14.3.s390.rpm SHA-256: f0965e85ffb533ab4367b3679b6f9e777b4475ce8bfa7820783574708eea562f
python-docs-2.3.4-14.3.s390.rpm SHA-256: b4e6bf80e445a4d979dadfbd50c1fa898ca731fef6f3a8125453d8e7c26a76eb
python-tools-2.3.4-14.3.s390.rpm SHA-256: d0b75ab17a1ad36a11843e73202c2e403f9c35c4fc54c3d9a7d7059e4003729f
tkinter-2.3.4-14.3.s390.rpm SHA-256: d9d110e7a6c7d7232bfbbf0144d1e640f17de7ef1ff10f731fa2cde4aa7b4996

Red Hat Enterprise Linux for Power, big endian 4

SRPM
python-2.3.4-14.3.src.rpm SHA-256: c31ca5342b423755111997a9e6cd44d3ba9cbef8585176abe5deec5940d3c23e
ppc
python-2.3.4-14.3.ppc.rpm SHA-256: d02f1698c7d19a3b1b71bad145f3e1f50ed5772863ee7e04498d70aa9412c711
python-devel-2.3.4-14.3.ppc.rpm SHA-256: 2039ac0c2aaf3aa33b2d92e15ec511726da76939b21f7e817395600eaff00009
python-docs-2.3.4-14.3.ppc.rpm SHA-256: 3226e4985c096838a0936ada7fefbf13b19ac9bc8f489f11d9b808cea3b4785e
python-tools-2.3.4-14.3.ppc.rpm SHA-256: 6a9debb16529d6b17ef19a736ce910599fd7104a4b677feb6cc9045fe96a7537
tkinter-2.3.4-14.3.ppc.rpm SHA-256: 37c48157700955250919fc16be5c4adba255376ed4c3759fb13ca7e136236390

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.