RHSA-2007:1077: Moderate: python security update
Python is an interpreted, interactive, object-oriented programminglanguage.An integer overflow flaw was discovered in the way Python's pcre modulehandled certain regular expressions. If a Python application used the pcremodule to compile and execute untrusted regular expressions, it may bepossible to cause the application to crash, or allow arbitrary codeexecution with the privileges of the Python interpreter. (CVE-2006-7228)A flaw was discovered in the strxfrm() function of Python's locale module.Strings generated by this function were not properly NULL-terminated, whichcould possibly cause disclosure of data stored in the memory of a Pythonapplication using this function. (CVE-2007-2052)Users of Python are advised to upgrade to these updated packages, whichcontain backported patches to resolve these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2007:1077?
The severity of RHSA-2007:1077 is classified as important.
How do I fix RHSA-2007:1077?
You can fix RHSA-2007:1077 by updating the Python package to the latest version provided by your distribution.
What systems are affected by RHSA-2007:1077?
RHSA-2007:1077 affects systems using the Python pcre module that process untrusted regular expressions.
What kind of vulnerability is RHSA-2007:1077?
RHSA-2007:1077 is an integer overflow vulnerability in Python's pcre module.
Can RHSA-2007:1077 be exploited remotely?
Yes, RHSA-2007:1077 can potentially be exploited remotely if an application processes untrusted input.