RHSA-2007:1076: Moderate: python security update

Python is an interpreted, interactive, object-oriented programminglanguage.An integer overflow flaw was discovered in the way Python's pcre modulehandled certain regular expressions. If a Python application used the pcremodule to compile and execute untrusted regular expressions, it may bepossible to cause the application to crash, or allow arbitrary codeexecution with the privileges of the Python interpreter. (CVE-2006-7228)A flaw was discovered in the strxfrm() function of Python's locale module.Strings generated by this function were not properly NULL-terminated. Thismay possibly cause disclosure of data stored in the memory of a Pythonapplication using this function. (CVE-2007-2052)Multiple integer overflow flaws were discovered in Python's imageop module.If an application written in Python used the imageop module to processuntrusted images, it could cause the application to crash, enter aninfinite loop, or possibly execute arbitrary code with the privileges ofthe Python interpreter. (CVE-2007-4965)Users of Python are advised to upgrade to these updated packages, whichcontain backported patches to resolve these issues.