Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2008-2315 (GCVE-0-2008-2315)
Vulnerability from cvelistv5 – Published: 2008-08-01 14:00 – Updated: 2024-08-07 08:58
VLAI?
EPSS
Summary
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T08:58:01.529Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "SUSE-SR:2008:017",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
},
{
"name": "ADV-2008-2288",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/2288"
},
{
"name": "32793",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/32793"
},
{
"name": "python-multiple-bo(44173)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
},
{
"name": "30491",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/30491"
},
{
"name": "38675",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/38675"
},
{
"name": "33937",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/33937"
},
{
"name": "oval:org.mitre.oval:def:8683",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
},
{
"name": "37471",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/37471"
},
{
"name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
},
{
"name": "31687",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31687"
},
{
"name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
},
{
"name": "GLSA-200807-16",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.apple.com/kb/HT3438"
},
{
"name": "APPLE-SA-2009-02-12",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
},
{
"name": "31358",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31358"
},
{
"name": "31332",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31332"
},
{
"name": "USN-632-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/usn-632-1"
},
{
"name": "MDVSA-2008:164",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
},
{
"name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
},
{
"name": "31518",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31518"
},
{
"name": "oval:org.mitre.oval:def:9761",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
},
{
"name": "python-modules-bo(44172)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
},
{
"name": "31305",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31305"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
},
{
"name": "31365",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31365"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.avaya.com/css/P8/documents/100074697"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
},
{
"name": "DSA-1667",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2008/dsa-1667"
},
{
"name": "MDVSA-2008:163",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
},
{
"name": "SSA:2008-217-01",
"tags": [
"vendor-advisory",
"x_refsource_SLACKWARE",
"x_transferred"
],
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
},
{
"name": "ADV-2009-3316",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2009/3316"
},
{
"name": "oval:org.mitre.oval:def:8445",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-07-31T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-11T19:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "SUSE-SR:2008:017",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
},
{
"name": "ADV-2008-2288",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/2288"
},
{
"name": "32793",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/32793"
},
{
"name": "python-multiple-bo(44173)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
},
{
"name": "30491",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/30491"
},
{
"name": "38675",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/38675"
},
{
"name": "33937",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/33937"
},
{
"name": "oval:org.mitre.oval:def:8683",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
},
{
"name": "37471",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/37471"
},
{
"name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
},
{
"name": "31687",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31687"
},
{
"name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
},
{
"name": "GLSA-200807-16",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.apple.com/kb/HT3438"
},
{
"name": "APPLE-SA-2009-02-12",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
},
{
"name": "31358",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31358"
},
{
"name": "31332",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31332"
},
{
"name": "USN-632-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/usn-632-1"
},
{
"name": "MDVSA-2008:164",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
},
{
"name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
},
{
"name": "31518",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31518"
},
{
"name": "oval:org.mitre.oval:def:9761",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
},
{
"name": "python-modules-bo(44172)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
},
{
"name": "31305",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31305"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
},
{
"name": "31365",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31365"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.avaya.com/css/P8/documents/100074697"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
},
{
"name": "DSA-1667",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2008/dsa-1667"
},
{
"name": "MDVSA-2008:163",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
},
{
"name": "SSA:2008-217-01",
"tags": [
"vendor-advisory",
"x_refsource_SLACKWARE"
],
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
},
{
"name": "ADV-2009-3316",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2009/3316"
},
{
"name": "oval:org.mitre.oval:def:8445",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-2315",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "SUSE-SR:2008:017",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
},
{
"name": "ADV-2008-2288",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/2288"
},
{
"name": "32793",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/32793"
},
{
"name": "python-multiple-bo(44173)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
},
{
"name": "30491",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/30491"
},
{
"name": "38675",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/38675"
},
{
"name": "33937",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/33937"
},
{
"name": "oval:org.mitre.oval:def:8683",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
},
{
"name": "37471",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/37471"
},
{
"name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
},
{
"name": "31687",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31687"
},
{
"name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
},
{
"name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
"refsource": "CONFIRM",
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
},
{
"name": "GLSA-200807-16",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
},
{
"name": "http://support.apple.com/kb/HT3438",
"refsource": "CONFIRM",
"url": "http://support.apple.com/kb/HT3438"
},
{
"name": "APPLE-SA-2009-02-12",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
},
{
"name": "31358",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31358"
},
{
"name": "31332",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31332"
},
{
"name": "USN-632-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/usn-632-1"
},
{
"name": "MDVSA-2008:164",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
},
{
"name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
},
{
"name": "31518",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31518"
},
{
"name": "oval:org.mitre.oval:def:9761",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
},
{
"name": "python-modules-bo(44172)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
},
{
"name": "31305",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31305"
},
{
"name": "http://bugs.gentoo.org/show_bug.cgi?id=230640",
"refsource": "CONFIRM",
"url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
},
{
"name": "31365",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31365"
},
{
"name": "http://support.avaya.com/css/P8/documents/100074697",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/css/P8/documents/100074697"
},
{
"name": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900",
"refsource": "CONFIRM",
"url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
},
{
"name": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view",
"refsource": "CONFIRM",
"url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
},
{
"name": "DSA-1667",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2008/dsa-1667"
},
{
"name": "MDVSA-2008:163",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
},
{
"name": "SSA:2008-217-01",
"refsource": "SLACKWARE",
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
},
{
"name": "ADV-2009-3316",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/3316"
},
{
"name": "oval:org.mitre.oval:def:8445",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-2315",
"datePublished": "2008-08-01T14:00:00",
"dateReserved": "2008-05-18T00:00:00",
"dateUpdated": "2024-08-07T08:58:01.529Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"2.5.2\", \"matchCriteriaId\": \"9E0806D1-04EA-492A-8587-1886F47ECC80\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.\"}, {\"lang\": \"es\", \"value\": \"M\\u00faltiples desbordamientos de enteros en Python 2.5.2 y anteriores. Permite a atacantes dependientes de contexto a tener un impacto desconocido a trav\\u00e9s de vectores relacionados con el (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, y los m\\u00f3dulos (6) stropmodule, (7) gcmodule, and (8) mmapmodule.\"}]",
"id": "CVE-2008-2315",
"lastModified": "2024-11-21T00:46:35.740",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": true, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2008-08-01T14:41:00.000",
"references": "[{\"url\": \"http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://bugs.gentoo.org/show_bug.cgi?id=230640\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/31305\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/31332\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/31358\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/31365\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/31518\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/31687\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/32793\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/33937\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/37471\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/38675\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200807-16.xml\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://support.apple.com/kb/HT3438\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://support.avaya.com/css/P8/documents/100074697\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2008/dsa-1667\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\", \"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\", \"Third Party Advisory\"]}, {\"url\": \"http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2008/11/05/2\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2008/11/05/3\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/507985/100/0/threaded\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/30491\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/usn-632-1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vmware.com/security/advisories/VMSA-2009-0016.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/2288\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\", \"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2009/3316\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\", \"Third Party Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/44172\", \"source\": \"cve@mitre.org\", \"tags\": [\"VDB Entry\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173\", \"source\": \"cve@mitre.org\", \"tags\": [\"VDB Entry\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761\", \"source\": \"cve@mitre.org\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://bugs.gentoo.org/show_bug.cgi?id=230640\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/31305\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/31332\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/31358\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/31365\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/31518\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/31687\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/32793\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/33937\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/37471\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://secunia.com/advisories/38675\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200807-16.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://support.apple.com/kb/HT3438\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://support.avaya.com/css/P8/documents/100074697\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2008/dsa-1667\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\"]}, {\"url\": \"http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2008/11/05/2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2008/11/05/3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/507985/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securityfocus.com/bid/30491\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/usn-632-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vmware.com/security/advisories/VMSA-2009-0016.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/2288\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2009/3316\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/44172\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"VDB Entry\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"VDB Entry\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-190\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2008-2315\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2008-08-01T14:41:00.000\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples desbordamientos de enteros en Python 2.5.2 y anteriores. Permite a atacantes dependientes de contexto a tener un impacto desconocido a trav\u00e9s de vectores relacionados con el (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, y los m\u00f3dulos (6) stropmodule, (7) gcmodule, and (8) mmapmodule.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.5.2\",\"matchCriteriaId\":\"9E0806D1-04EA-492A-8587-1886F47ECC80\"}]}]}],\"references\":[{\"url\":\"http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://bugs.gentoo.org/show_bug.cgi?id=230640\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/31305\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/31332\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/31358\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/31365\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/31518\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/31687\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/32793\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/33937\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/37471\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/38675\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200807-16.xml\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT3438\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.avaya.com/css/P8/documents/100074697\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2008/dsa-1667\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2008/11/05/2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2008/11/05/3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.securityfocus.com/archive/1/507985/100/0/threaded\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/30491\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/usn-632-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2009-0016.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/2288\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/3316\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/44172\",\"source\":\"cve@mitre.org\",\"tags\":[\"VDB Entry\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173\",\"source\":\"cve@mitre.org\",\"tags\":[\"VDB Entry\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://bugs.gentoo.org/show_bug.cgi?id=230640\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/31305\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/31332\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/31358\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/31365\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/31518\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/31687\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/32793\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/33937\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/37471\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://secunia.com/advisories/38675\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200807-16.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT3438\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.avaya.com/css/P8/documents/100074697\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2008/dsa-1667\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2008/11/05/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2008/11/05/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.securityfocus.com/archive/1/507985/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/30491\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/usn-632-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2009-0016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/2288\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/3316\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/44172\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"VDB Entry\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"VDB Entry\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]}]}}"
}
}
CERTA-2009-AVI-513
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités découvertes dans les produits VMware peuvent être exploitées à distance par un utilisateur malintentionné afin de compromettre le système vulnérable ou encore d'entraver son bon fonctionnement.
Description
Les vulnérabilités présentes dans les produits VMware peuvent être exploitées afin de porter atteinte à l'intégrité et à la confidentialité des données, de réaliser un déni de service, d'injecter et d'exécuter indirectement du code arbitraire, d'élever ses privilèges ou d'exécuter du code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| VMware | N/A | VMware Server 2.x ; | ||
| VMware | ESXi | VMware ESXi 3.x ; | ||
| VMware | N/A | VMware vMA 4.x. | ||
| VMware | N/A | VMware ESX Server 4.x ; | ||
| VMware | N/A | VMware ESX Server 2.x ; | ||
| VMware | N/A | VMware ESX Server 3.x ; | ||
| VMware | ESXi | VMware ESXi 4.x ; | ||
| VMware | vCenter Server | VMware vCenter Server 4.x ; | ||
| VMware | N/A | VMware VirtualCenter 2.x ; |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "VMware Server 2.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi 3.x ;",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vMA 4.x.",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX Server 4.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX Server 2.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX Server 3.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi 4.x ;",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server 4.x ;",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware VirtualCenter 2.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nLes vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans les produits VMware peuvent \u00eatre\nexploit\u00e9es afin de porter atteinte \u00e0 l\u0027int\u00e9grit\u00e9 et \u00e0 la confidentialit\u00e9\ndes donn\u00e9es, de r\u00e9aliser un d\u00e9ni de service, d\u0027injecter et d\u0027ex\u00e9cuter\nindirectement du code arbitraire, d\u0027\u00e9lever ses privil\u00e8ges ou d\u0027ex\u00e9cuter\ndu code arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-2724",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2724"
},
{
"name": "CVE-2009-0676",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0676"
},
{
"name": "CVE-2009-2721",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2721"
},
{
"name": "CVE-2008-3143",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
},
{
"name": "CVE-2009-2692",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2692"
},
{
"name": "CVE-2009-2406",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2406"
},
{
"name": "CVE-2009-1389",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1389"
},
{
"name": "CVE-2008-0002",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0002"
},
{
"name": "CVE-2009-1106",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1106"
},
{
"name": "CVE-2009-1072",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1072"
},
{
"name": "CVE-2008-4307",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4307"
},
{
"name": "CVE-2009-1104",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1104"
},
{
"name": "CVE-2009-2407",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2407"
},
{
"name": "CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"name": "CVE-2009-1101",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1101"
},
{
"name": "CVE-2009-2416",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2416"
},
{
"name": "CVE-2009-1385",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1385"
},
{
"name": "CVE-2009-0746",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0746"
},
{
"name": "CVE-2009-2673",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2673"
},
{
"name": "CVE-2007-5966",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5966"
},
{
"name": "CVE-2009-2719",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2719"
},
{
"name": "CVE-2008-4864",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
},
{
"name": "CVE-2009-2417",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2417"
},
{
"name": "CVE-2009-1439",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1439"
},
{
"name": "CVE-2009-0322",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0322"
},
{
"name": "CVE-2009-1895",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1895"
},
{
"name": "CVE-2009-1094",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1094"
},
{
"name": "CVE-2009-0748",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0748"
},
{
"name": "CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"name": "CVE-2009-0747",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0747"
},
{
"name": "CVE-2009-0580",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0580"
},
{
"name": "CVE-2009-1095",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1095"
},
{
"name": "CVE-2009-2672",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2672"
},
{
"name": "CVE-2009-0675",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0675"
},
{
"name": "CVE-2007-5461",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5461"
},
{
"name": "CVE-2009-2670",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2670"
},
{
"name": "CVE-2009-1102",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1102"
},
{
"name": "CVE-2009-1630",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1630"
},
{
"name": "CVE-2009-0269",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0269"
},
{
"name": "CVE-2008-3528",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3528"
},
{
"name": "CVE-2008-5031",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
},
{
"name": "CVE-2008-1721",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1721"
},
{
"name": "CVE-2009-1388",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1388"
},
{
"name": "CVE-2009-1192",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1192"
},
{
"name": "CVE-2009-2720",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2720"
},
{
"name": "CVE-2009-0834",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0834"
},
{
"name": "CVE-2009-2671",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2671"
},
{
"name": "CVE-2009-2848",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2848"
},
{
"name": "CVE-2009-2675",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2675"
},
{
"name": "CVE-2008-1232",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1232"
},
{
"name": "CVE-2009-0159",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0159"
},
{
"name": "CVE-2009-0778",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0778"
},
{
"name": "CVE-2009-2625",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2625"
},
{
"name": "CVE-2009-1099",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1099"
},
{
"name": "CVE-2009-1252",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1252"
},
{
"name": "CVE-2009-2698",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2698"
},
{
"name": "CVE-2008-2370",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2370"
},
{
"name": "CVE-2009-0033",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0033"
},
{
"name": "CVE-2009-2723",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2723"
},
{
"name": "CVE-2009-1107",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1107"
},
{
"name": "CVE-2009-2716",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2716"
},
{
"name": "CVE-2007-5333",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5333"
},
{
"name": "CVE-2008-1947",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1947"
},
{
"name": "CVE-2009-1105",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1105"
},
{
"name": "CVE-2007-6286",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6286"
},
{
"name": "CVE-2009-0028",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0028"
},
{
"name": "CVE-2009-1337",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1337"
},
{
"name": "CVE-2009-0781",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0781"
},
{
"name": "CVE-2009-2414",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2414"
},
{
"name": "CVE-2007-2052",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2052"
},
{
"name": "CVE-2009-1336",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1336"
},
{
"name": "CVE-2009-0783",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0783"
},
{
"name": "CVE-2008-5515",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5515"
},
{
"name": "CVE-2007-4965",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
},
{
"name": "CVE-2009-1633",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1633"
},
{
"name": "CVE-2009-2722",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2722"
},
{
"name": "CVE-2008-5700",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5700"
},
{
"name": "CVE-2009-1103",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1103"
},
{
"name": "CVE-2009-1100",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1100"
},
{
"name": "CVE-2009-2676",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2676"
},
{
"name": "CVE-2007-5342",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5342"
},
{
"name": "CVE-2009-1096",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1096"
},
{
"name": "CVE-2009-1098",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1098"
},
{
"name": "CVE-2009-0787",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0787"
},
{
"name": "CVE-2008-1887",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
},
{
"name": "CVE-2009-1097",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1097"
},
{
"name": "CVE-2009-2847",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2847"
},
{
"name": "CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
},
{
"name": "CVE-2009-0696",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0696"
},
{
"name": "CVE-2009-2718",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2718"
},
{
"name": "CVE-2009-0745",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0745"
},
{
"name": "CVE-2009-1093",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1093"
}
],
"links": [],
"reference": "CERTA-2009-AVI-513",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-11-24T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s d\u00e9couvertes dans les produits VMware peuvent\n\u00eatre exploit\u00e9es \u00e0 distance par un utilisateur malintentionn\u00e9 afin de\ncompromettre le syst\u00e8me vuln\u00e9rable ou encore d\u0027entraver son bon\nfonctionnement.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMware du 20 novembre 2009",
"url": "http://lists.vmware.com/pipermail/security-announce/2009/000070.html"
}
]
}
CERTA-2009-AVI-068
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans le système Mac OS X d'Apple. L'exploitation de ces vulnérabilités permet un grand nombre d'actions, dont l'exécution de code arbitraire à distance.
Description
Apple vient de publier des mises à jour pour son système d'exploitation Mac OS X. Ces correctifs concernent la mise à jour de plusieurs applicatifs :
- AFP Server ;
- Apple Pixlet Video ;
- Carbon Core ;
- CFNetwork ;
- Certificate Assistant ;
- ClamAV ;
- CoreText ;
- CUPS ;
- DS Tools ;
- fetchmail ;
- Folder Manager ;
- FSEvents ;
- Network Time ;
- perl ;
- Printing ;
- python ;
- Remote Apple Events ;
- Safari RSS ;
- servermgrd ;
- SMB ;
- SquirrelMail ;
- X11 ;
- Xterm.
L'exploitation des différentes vulnérabilités permet d'effectuer un grand nombre d'actions malveillantes, dont l'exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Mac OS X versions 10.5.6 et ant\u00e9rieures ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Mac OS X versions 10.4.11 et ant\u00e9rieures.",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nApple vient de publier des mises \u00e0 jour pour son syst\u00e8me d\u0027exploitation\nMac OS X. Ces correctifs concernent la mise \u00e0 jour de plusieurs\napplicatifs :\n\n- AFP Server ;\n- Apple Pixlet Video ;\n- Carbon Core ;\n- CFNetwork ;\n- Certificate Assistant ;\n- ClamAV ;\n- CoreText ;\n- CUPS ;\n- DS Tools ;\n- fetchmail ;\n- Folder Manager ;\n- FSEvents ;\n- Network Time ;\n- perl ;\n- Printing ;\n- python ;\n- Remote Apple Events ;\n- Safari RSS ;\n- servermgrd ;\n- SMB ;\n- SquirrelMail ;\n- X11 ;\n- Xterm.\n\nL\u0027exploitation des diff\u00e9rentes vuln\u00e9rabilit\u00e9s permet d\u0027effectuer un\ngrand nombre d\u0027actions malveillantes, dont l\u0027ex\u00e9cution de code\narbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-2316",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2316"
},
{
"name": "CVE-2008-2361",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2361"
},
{
"name": "CVE-2008-2379",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2379"
},
{
"name": "CVE-2008-1808",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1808"
},
{
"name": "CVE-2009-0020",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0020"
},
{
"name": "CVE-2009-0012",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0012"
},
{
"name": "CVE-2008-3663",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3663"
},
{
"name": "CVE-2009-0141",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0141"
},
{
"name": "CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"name": "CVE-2007-4565",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4565"
},
{
"name": "CVE-2007-1352",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1352"
},
{
"name": "CVE-2009-0139",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0139"
},
{
"name": "CVE-2008-4864",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
},
{
"name": "CVE-2009-0019",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0019"
},
{
"name": "CVE-2008-1679",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1679"
},
{
"name": "CVE-2008-2711",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2711"
},
{
"name": "CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"name": "CVE-2008-2362",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2362"
},
{
"name": "CVE-2009-0018",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0018"
},
{
"name": "CVE-2009-0140",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0140"
},
{
"name": "CVE-2009-0015",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0015"
},
{
"name": "CVE-2008-1379",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1379"
},
{
"name": "CVE-2008-5031",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
},
{
"name": "CVE-2008-1721",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1721"
},
{
"name": "CVE-2008-5050",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5050"
},
{
"name": "CVE-2006-1861",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-1861"
},
{
"name": "CVE-2008-1927",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1927"
},
{
"name": "CVE-2007-1667",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1667"
},
{
"name": "CVE-2008-5183",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5183"
},
{
"name": "CVE-2009-0138",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0138"
},
{
"name": "CVE-2009-0014",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0014"
},
{
"name": "CVE-2009-0009",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0009"
},
{
"name": "CVE-2009-0137",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0137"
},
{
"name": "CVE-2008-2360",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2360"
},
{
"name": "CVE-2009-0142",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0142"
},
{
"name": "CVE-2007-4965",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
},
{
"name": "CVE-2009-0011",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0011"
},
{
"name": "CVE-2008-5314",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5314"
},
{
"name": "CVE-2008-1807",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1807"
},
{
"name": "CVE-2008-1887",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
},
{
"name": "CVE-2008-1377",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1377"
},
{
"name": "CVE-2007-1351",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1351"
},
{
"name": "CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
},
{
"name": "CVE-2009-0013",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0013"
},
{
"name": "CVE-2009-0017",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0017"
},
{
"name": "CVE-2006-3467",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3467"
},
{
"name": "CVE-2008-1806",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1806"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT3438 du 12 f\u00e9vrier 2009 :",
"url": "http://support.apple.com/kb/HT3438"
}
],
"reference": "CERTA-2009-AVI-068",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-02-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le syst\u00e8me Mac OS X\nd\u0027Apple. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s permet un grand nombre\nd\u0027actions, dont l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Mac OS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple 2009-001 du 12 f\u00e9vrier 2009",
"url": null
}
]
}
CERTA-2008-AVI-391
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités affectent Python. Certaines d'entre elles permettent à un utilisateur malintentionné de réaliser un déni de service.
Description
Python est un langage de progammation objet interprété. Plusieurs vulnérabilités affectent l'interpréteur de ce langage. Elles prennent la forme de débordements d'entiers, de débordements de zones mémoire et de corruptions de la mémoire. Leur exploitation permet de réaliser un déni de service et potentiellement de l'exécution de code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Python version 2.5.2 et versions antérieures.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cSPAN class=\"textit\"\u003ePython\u003c/SPAN\u003e version 2.5.2 et versions ant\u00e9rieures.",
"content": "## Description\n\nPython est un langage de progammation objet interpr\u00e9t\u00e9. Plusieurs\nvuln\u00e9rabilit\u00e9s affectent l\u0027interpr\u00e9teur de ce langage. Elles prennent la\nforme de d\u00e9bordements d\u0027entiers, de d\u00e9bordements de zones m\u00e9moire et de\ncorruptions de la m\u00e9moire. Leur exploitation permet de r\u00e9aliser un d\u00e9ni\nde service et potentiellement de l\u0027ex\u00e9cution de code arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-2316",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2316"
},
{
"name": "CVE-2008-3143",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
},
{
"name": "CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"name": "CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"name": "CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200807-16 du 31 juillet 2008 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200807-16.xml"
},
{
"title": "Site du projet Python :",
"url": "http://www.python.org/"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-632-1 du 01 ao\u00fbt 2008 :",
"url": "https://lists.ubuntu.com/archives/ubuntu-security-announce/2008-August/000736.html"
}
],
"reference": "CERTA-2008-AVI-391",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-08-06T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s affectent \u003cspan class=\"textit\"\u003ePython\u003c/span\u003e.\nCertaines d\u0027entre elles permettent \u00e0 un utilisateur malintentionn\u00e9 de\nr\u00e9aliser un d\u00e9ni de service.\n",
"title": "Vuln\u00e9rabilit\u00e9s de Python",
"vendor_advisories": [
{
"published_at": null,
"title": "CVE-2008-2315, 2316 et 3142 \u00e0 3144",
"url": null
}
]
}
CERTA-2008-AVI-391
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités affectent Python. Certaines d'entre elles permettent à un utilisateur malintentionné de réaliser un déni de service.
Description
Python est un langage de progammation objet interprété. Plusieurs vulnérabilités affectent l'interpréteur de ce langage. Elles prennent la forme de débordements d'entiers, de débordements de zones mémoire et de corruptions de la mémoire. Leur exploitation permet de réaliser un déni de service et potentiellement de l'exécution de code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Python version 2.5.2 et versions antérieures.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cSPAN class=\"textit\"\u003ePython\u003c/SPAN\u003e version 2.5.2 et versions ant\u00e9rieures.",
"content": "## Description\n\nPython est un langage de progammation objet interpr\u00e9t\u00e9. Plusieurs\nvuln\u00e9rabilit\u00e9s affectent l\u0027interpr\u00e9teur de ce langage. Elles prennent la\nforme de d\u00e9bordements d\u0027entiers, de d\u00e9bordements de zones m\u00e9moire et de\ncorruptions de la m\u00e9moire. Leur exploitation permet de r\u00e9aliser un d\u00e9ni\nde service et potentiellement de l\u0027ex\u00e9cution de code arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-2316",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2316"
},
{
"name": "CVE-2008-3143",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
},
{
"name": "CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"name": "CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"name": "CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200807-16 du 31 juillet 2008 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200807-16.xml"
},
{
"title": "Site du projet Python :",
"url": "http://www.python.org/"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-632-1 du 01 ao\u00fbt 2008 :",
"url": "https://lists.ubuntu.com/archives/ubuntu-security-announce/2008-August/000736.html"
}
],
"reference": "CERTA-2008-AVI-391",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-08-06T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s affectent \u003cspan class=\"textit\"\u003ePython\u003c/span\u003e.\nCertaines d\u0027entre elles permettent \u00e0 un utilisateur malintentionn\u00e9 de\nr\u00e9aliser un d\u00e9ni de service.\n",
"title": "Vuln\u00e9rabilit\u00e9s de Python",
"vendor_advisories": [
{
"published_at": null,
"title": "CVE-2008-2315, 2316 et 3142 \u00e0 3144",
"url": null
}
]
}
CERTA-2009-AVI-068
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans le système Mac OS X d'Apple. L'exploitation de ces vulnérabilités permet un grand nombre d'actions, dont l'exécution de code arbitraire à distance.
Description
Apple vient de publier des mises à jour pour son système d'exploitation Mac OS X. Ces correctifs concernent la mise à jour de plusieurs applicatifs :
- AFP Server ;
- Apple Pixlet Video ;
- Carbon Core ;
- CFNetwork ;
- Certificate Assistant ;
- ClamAV ;
- CoreText ;
- CUPS ;
- DS Tools ;
- fetchmail ;
- Folder Manager ;
- FSEvents ;
- Network Time ;
- perl ;
- Printing ;
- python ;
- Remote Apple Events ;
- Safari RSS ;
- servermgrd ;
- SMB ;
- SquirrelMail ;
- X11 ;
- Xterm.
L'exploitation des différentes vulnérabilités permet d'effectuer un grand nombre d'actions malveillantes, dont l'exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Mac OS X versions 10.5.6 et ant\u00e9rieures ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Mac OS X versions 10.4.11 et ant\u00e9rieures.",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nApple vient de publier des mises \u00e0 jour pour son syst\u00e8me d\u0027exploitation\nMac OS X. Ces correctifs concernent la mise \u00e0 jour de plusieurs\napplicatifs :\n\n- AFP Server ;\n- Apple Pixlet Video ;\n- Carbon Core ;\n- CFNetwork ;\n- Certificate Assistant ;\n- ClamAV ;\n- CoreText ;\n- CUPS ;\n- DS Tools ;\n- fetchmail ;\n- Folder Manager ;\n- FSEvents ;\n- Network Time ;\n- perl ;\n- Printing ;\n- python ;\n- Remote Apple Events ;\n- Safari RSS ;\n- servermgrd ;\n- SMB ;\n- SquirrelMail ;\n- X11 ;\n- Xterm.\n\nL\u0027exploitation des diff\u00e9rentes vuln\u00e9rabilit\u00e9s permet d\u0027effectuer un\ngrand nombre d\u0027actions malveillantes, dont l\u0027ex\u00e9cution de code\narbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-2316",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2316"
},
{
"name": "CVE-2008-2361",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2361"
},
{
"name": "CVE-2008-2379",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2379"
},
{
"name": "CVE-2008-1808",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1808"
},
{
"name": "CVE-2009-0020",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0020"
},
{
"name": "CVE-2009-0012",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0012"
},
{
"name": "CVE-2008-3663",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3663"
},
{
"name": "CVE-2009-0141",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0141"
},
{
"name": "CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"name": "CVE-2007-4565",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4565"
},
{
"name": "CVE-2007-1352",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1352"
},
{
"name": "CVE-2009-0139",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0139"
},
{
"name": "CVE-2008-4864",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
},
{
"name": "CVE-2009-0019",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0019"
},
{
"name": "CVE-2008-1679",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1679"
},
{
"name": "CVE-2008-2711",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2711"
},
{
"name": "CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"name": "CVE-2008-2362",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2362"
},
{
"name": "CVE-2009-0018",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0018"
},
{
"name": "CVE-2009-0140",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0140"
},
{
"name": "CVE-2009-0015",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0015"
},
{
"name": "CVE-2008-1379",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1379"
},
{
"name": "CVE-2008-5031",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
},
{
"name": "CVE-2008-1721",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1721"
},
{
"name": "CVE-2008-5050",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5050"
},
{
"name": "CVE-2006-1861",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-1861"
},
{
"name": "CVE-2008-1927",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1927"
},
{
"name": "CVE-2007-1667",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1667"
},
{
"name": "CVE-2008-5183",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5183"
},
{
"name": "CVE-2009-0138",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0138"
},
{
"name": "CVE-2009-0014",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0014"
},
{
"name": "CVE-2009-0009",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0009"
},
{
"name": "CVE-2009-0137",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0137"
},
{
"name": "CVE-2008-2360",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2360"
},
{
"name": "CVE-2009-0142",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0142"
},
{
"name": "CVE-2007-4965",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
},
{
"name": "CVE-2009-0011",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0011"
},
{
"name": "CVE-2008-5314",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5314"
},
{
"name": "CVE-2008-1807",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1807"
},
{
"name": "CVE-2008-1887",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
},
{
"name": "CVE-2008-1377",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1377"
},
{
"name": "CVE-2007-1351",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1351"
},
{
"name": "CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
},
{
"name": "CVE-2009-0013",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0013"
},
{
"name": "CVE-2009-0017",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0017"
},
{
"name": "CVE-2006-3467",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3467"
},
{
"name": "CVE-2008-1806",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1806"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT3438 du 12 f\u00e9vrier 2009 :",
"url": "http://support.apple.com/kb/HT3438"
}
],
"reference": "CERTA-2009-AVI-068",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-02-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le syst\u00e8me Mac OS X\nd\u0027Apple. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s permet un grand nombre\nd\u0027actions, dont l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Mac OS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple 2009-001 du 12 f\u00e9vrier 2009",
"url": null
}
]
}
CERTA-2009-AVI-513
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités découvertes dans les produits VMware peuvent être exploitées à distance par un utilisateur malintentionné afin de compromettre le système vulnérable ou encore d'entraver son bon fonctionnement.
Description
Les vulnérabilités présentes dans les produits VMware peuvent être exploitées afin de porter atteinte à l'intégrité et à la confidentialité des données, de réaliser un déni de service, d'injecter et d'exécuter indirectement du code arbitraire, d'élever ses privilèges ou d'exécuter du code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| VMware | N/A | VMware Server 2.x ; | ||
| VMware | ESXi | VMware ESXi 3.x ; | ||
| VMware | N/A | VMware vMA 4.x. | ||
| VMware | N/A | VMware ESX Server 4.x ; | ||
| VMware | N/A | VMware ESX Server 2.x ; | ||
| VMware | N/A | VMware ESX Server 3.x ; | ||
| VMware | ESXi | VMware ESXi 4.x ; | ||
| VMware | vCenter Server | VMware vCenter Server 4.x ; | ||
| VMware | N/A | VMware VirtualCenter 2.x ; |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "VMware Server 2.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi 3.x ;",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vMA 4.x.",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX Server 4.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX Server 2.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESX Server 3.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware ESXi 4.x ;",
"product": {
"name": "ESXi",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware vCenter Server 4.x ;",
"product": {
"name": "vCenter Server",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware VirtualCenter 2.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nLes vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans les produits VMware peuvent \u00eatre\nexploit\u00e9es afin de porter atteinte \u00e0 l\u0027int\u00e9grit\u00e9 et \u00e0 la confidentialit\u00e9\ndes donn\u00e9es, de r\u00e9aliser un d\u00e9ni de service, d\u0027injecter et d\u0027ex\u00e9cuter\nindirectement du code arbitraire, d\u0027\u00e9lever ses privil\u00e8ges ou d\u0027ex\u00e9cuter\ndu code arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-2724",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2724"
},
{
"name": "CVE-2009-0676",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0676"
},
{
"name": "CVE-2009-2721",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2721"
},
{
"name": "CVE-2008-3143",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
},
{
"name": "CVE-2009-2692",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2692"
},
{
"name": "CVE-2009-2406",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2406"
},
{
"name": "CVE-2009-1389",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1389"
},
{
"name": "CVE-2008-0002",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0002"
},
{
"name": "CVE-2009-1106",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1106"
},
{
"name": "CVE-2009-1072",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1072"
},
{
"name": "CVE-2008-4307",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4307"
},
{
"name": "CVE-2009-1104",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1104"
},
{
"name": "CVE-2009-2407",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2407"
},
{
"name": "CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"name": "CVE-2009-1101",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1101"
},
{
"name": "CVE-2009-2416",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2416"
},
{
"name": "CVE-2009-1385",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1385"
},
{
"name": "CVE-2009-0746",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0746"
},
{
"name": "CVE-2009-2673",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2673"
},
{
"name": "CVE-2007-5966",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5966"
},
{
"name": "CVE-2009-2719",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2719"
},
{
"name": "CVE-2008-4864",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
},
{
"name": "CVE-2009-2417",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2417"
},
{
"name": "CVE-2009-1439",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1439"
},
{
"name": "CVE-2009-0322",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0322"
},
{
"name": "CVE-2009-1895",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1895"
},
{
"name": "CVE-2009-1094",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1094"
},
{
"name": "CVE-2009-0748",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0748"
},
{
"name": "CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"name": "CVE-2009-0747",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0747"
},
{
"name": "CVE-2009-0580",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0580"
},
{
"name": "CVE-2009-1095",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1095"
},
{
"name": "CVE-2009-2672",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2672"
},
{
"name": "CVE-2009-0675",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0675"
},
{
"name": "CVE-2007-5461",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5461"
},
{
"name": "CVE-2009-2670",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2670"
},
{
"name": "CVE-2009-1102",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1102"
},
{
"name": "CVE-2009-1630",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1630"
},
{
"name": "CVE-2009-0269",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0269"
},
{
"name": "CVE-2008-3528",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3528"
},
{
"name": "CVE-2008-5031",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
},
{
"name": "CVE-2008-1721",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1721"
},
{
"name": "CVE-2009-1388",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1388"
},
{
"name": "CVE-2009-1192",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1192"
},
{
"name": "CVE-2009-2720",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2720"
},
{
"name": "CVE-2009-0834",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0834"
},
{
"name": "CVE-2009-2671",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2671"
},
{
"name": "CVE-2009-2848",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2848"
},
{
"name": "CVE-2009-2675",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2675"
},
{
"name": "CVE-2008-1232",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1232"
},
{
"name": "CVE-2009-0159",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0159"
},
{
"name": "CVE-2009-0778",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0778"
},
{
"name": "CVE-2009-2625",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2625"
},
{
"name": "CVE-2009-1099",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1099"
},
{
"name": "CVE-2009-1252",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1252"
},
{
"name": "CVE-2009-2698",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2698"
},
{
"name": "CVE-2008-2370",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2370"
},
{
"name": "CVE-2009-0033",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0033"
},
{
"name": "CVE-2009-2723",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2723"
},
{
"name": "CVE-2009-1107",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1107"
},
{
"name": "CVE-2009-2716",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2716"
},
{
"name": "CVE-2007-5333",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5333"
},
{
"name": "CVE-2008-1947",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1947"
},
{
"name": "CVE-2009-1105",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1105"
},
{
"name": "CVE-2007-6286",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6286"
},
{
"name": "CVE-2009-0028",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0028"
},
{
"name": "CVE-2009-1337",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1337"
},
{
"name": "CVE-2009-0781",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0781"
},
{
"name": "CVE-2009-2414",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2414"
},
{
"name": "CVE-2007-2052",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2052"
},
{
"name": "CVE-2009-1336",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1336"
},
{
"name": "CVE-2009-0783",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0783"
},
{
"name": "CVE-2008-5515",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5515"
},
{
"name": "CVE-2007-4965",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
},
{
"name": "CVE-2009-1633",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1633"
},
{
"name": "CVE-2009-2722",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2722"
},
{
"name": "CVE-2008-5700",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5700"
},
{
"name": "CVE-2009-1103",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1103"
},
{
"name": "CVE-2009-1100",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1100"
},
{
"name": "CVE-2009-2676",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2676"
},
{
"name": "CVE-2007-5342",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5342"
},
{
"name": "CVE-2009-1096",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1096"
},
{
"name": "CVE-2009-1098",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1098"
},
{
"name": "CVE-2009-0787",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0787"
},
{
"name": "CVE-2008-1887",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
},
{
"name": "CVE-2009-1097",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1097"
},
{
"name": "CVE-2009-2847",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2847"
},
{
"name": "CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
},
{
"name": "CVE-2009-0696",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0696"
},
{
"name": "CVE-2009-2718",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-2718"
},
{
"name": "CVE-2009-0745",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0745"
},
{
"name": "CVE-2009-1093",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-1093"
}
],
"links": [],
"reference": "CERTA-2009-AVI-513",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-11-24T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s d\u00e9couvertes dans les produits VMware peuvent\n\u00eatre exploit\u00e9es \u00e0 distance par un utilisateur malintentionn\u00e9 afin de\ncompromettre le syst\u00e8me vuln\u00e9rable ou encore d\u0027entraver son bon\nfonctionnement.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMware du 20 novembre 2009",
"url": "http://lists.vmware.com/pipermail/security-announce/2009/000070.html"
}
]
}
RHSA-2009_1178
Vulnerability from csaf_redhat - Published: 2009-07-27 09:32 - Updated: 2024-11-22 02:31Summary
Red Hat Security Advisory: python security update
Notes
Topic
Updated python packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 3.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
Python is an interpreted, interactive, object-oriented programming
language.
When the assert() system call was disabled, an input sanitization flaw was
revealed in the Python string object implementation that led to a buffer
overflow. The missing check for negative size values meant the Python
memory allocator could allocate less memory than expected. This could
result in arbitrary code execution with the Python interpreter's
privileges. (CVE-2008-1887)
Multiple buffer and integer overflow flaws were found in the Python Unicode
string processing and in the Python Unicode and string object
implementations. An attacker could use these flaws to cause a denial of
service (Python application crash). (CVE-2008-3142, CVE-2008-5031)
Multiple integer overflow flaws were found in the Python imageop module. If
a Python application used the imageop module to process untrusted images,
it could cause the application to crash or, potentially, execute arbitrary
code with the Python interpreter's privileges. (CVE-2008-1679,
CVE-2008-4864)
Multiple integer underflow and overflow flaws were found in the Python
snprintf() wrapper implementation. An attacker could use these flaws to
cause a denial of service (memory corruption). (CVE-2008-3144)
Multiple integer overflow flaws were found in various Python modules. An
attacker could use these flaws to cause a denial of service (Python
application crash). (CVE-2008-2315, CVE-2008-3143)
Red Hat would like to thank David Remahl of the Apple Product Security team
for responsibly reporting the CVE-2008-1679 and CVE-2008-2315 issues.
All Python users should upgrade to these updated packages, which contain
backported patches to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated python packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 3.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming\nlanguage.\n\nWhen the assert() system call was disabled, an input sanitization flaw was\nrevealed in the Python string object implementation that led to a buffer\noverflow. The missing check for negative size values meant the Python\nmemory allocator could allocate less memory than expected. This could\nresult in arbitrary code execution with the Python interpreter\u0027s\nprivileges. (CVE-2008-1887)\n\nMultiple buffer and integer overflow flaws were found in the Python Unicode\nstring processing and in the Python Unicode and string object\nimplementations. An attacker could use these flaws to cause a denial of\nservice (Python application crash). (CVE-2008-3142, CVE-2008-5031)\n\nMultiple integer overflow flaws were found in the Python imageop module. If\na Python application used the imageop module to process untrusted images,\nit could cause the application to crash or, potentially, execute arbitrary\ncode with the Python interpreter\u0027s privileges. (CVE-2008-1679,\nCVE-2008-4864)\n\nMultiple integer underflow and overflow flaws were found in the Python\nsnprintf() wrapper implementation. An attacker could use these flaws to\ncause a denial of service (memory corruption). (CVE-2008-3144)\n\nMultiple integer overflow flaws were found in various Python modules. An\nattacker could use these flaws to cause a denial of service (Python\napplication crash). (CVE-2008-2315, CVE-2008-3143)\n\nRed Hat would like to thank David Remahl of the Apple Product Security team\nfor responsibly reporting the CVE-2008-1679 and CVE-2008-2315 issues.\n\nAll Python users should upgrade to these updated packages, which contain\nbackported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1178",
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "441306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=441306"
},
{
"category": "external",
"summary": "443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1178.json"
}
],
"title": "Red Hat Security Advisory: python security update",
"tracking": {
"current_release_date": "2024-11-22T02:31:46+00:00",
"generator": {
"date": "2024-11-22T02:31:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2009:1178",
"initial_release_date": "2009-07-27T09:32:00+00:00",
"revision_history": [
{
"date": "2009-07-27T09:32:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-27T05:36:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T02:31:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.ia64",
"product": {
"name": "python-devel-0:2.2.3-6.11.ia64",
"product_id": "python-devel-0:2.2.3-6.11.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.ia64",
"product": {
"name": "python-tools-0:2.2.3-6.11.ia64",
"product_id": "python-tools-0:2.2.3-6.11.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.ia64",
"product": {
"name": "python-0:2.2.3-6.11.ia64",
"product_id": "python-0:2.2.3-6.11.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.ia64",
"product": {
"name": "tkinter-0:2.2.3-6.11.ia64",
"product_id": "tkinter-0:2.2.3-6.11.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.ia64",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.ia64",
"product_id": "python-debuginfo-0:2.2.3-6.11.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.x86_64",
"product": {
"name": "python-devel-0:2.2.3-6.11.x86_64",
"product_id": "python-devel-0:2.2.3-6.11.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.x86_64",
"product": {
"name": "python-tools-0:2.2.3-6.11.x86_64",
"product_id": "python-tools-0:2.2.3-6.11.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.x86_64",
"product": {
"name": "python-0:2.2.3-6.11.x86_64",
"product_id": "python-0:2.2.3-6.11.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.x86_64",
"product": {
"name": "tkinter-0:2.2.3-6.11.x86_64",
"product_id": "tkinter-0:2.2.3-6.11.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.x86_64",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.x86_64",
"product_id": "python-debuginfo-0:2.2.3-6.11.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.i386",
"product": {
"name": "python-devel-0:2.2.3-6.11.i386",
"product_id": "python-devel-0:2.2.3-6.11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.i386",
"product": {
"name": "python-tools-0:2.2.3-6.11.i386",
"product_id": "python-tools-0:2.2.3-6.11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.i386",
"product": {
"name": "python-0:2.2.3-6.11.i386",
"product_id": "python-0:2.2.3-6.11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.i386",
"product": {
"name": "tkinter-0:2.2.3-6.11.i386",
"product_id": "tkinter-0:2.2.3-6.11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.i386",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.i386",
"product_id": "python-debuginfo-0:2.2.3-6.11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.src",
"product": {
"name": "python-0:2.2.3-6.11.src",
"product_id": "python-0:2.2.3-6.11.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.ppc",
"product": {
"name": "python-devel-0:2.2.3-6.11.ppc",
"product_id": "python-devel-0:2.2.3-6.11.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.ppc",
"product": {
"name": "python-tools-0:2.2.3-6.11.ppc",
"product_id": "python-tools-0:2.2.3-6.11.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.ppc",
"product": {
"name": "python-0:2.2.3-6.11.ppc",
"product_id": "python-0:2.2.3-6.11.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.ppc",
"product": {
"name": "tkinter-0:2.2.3-6.11.ppc",
"product_id": "tkinter-0:2.2.3-6.11.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.ppc",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.ppc",
"product_id": "python-debuginfo-0:2.2.3-6.11.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.s390x",
"product": {
"name": "python-devel-0:2.2.3-6.11.s390x",
"product_id": "python-devel-0:2.2.3-6.11.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.s390x",
"product": {
"name": "python-tools-0:2.2.3-6.11.s390x",
"product_id": "python-tools-0:2.2.3-6.11.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.s390x",
"product": {
"name": "python-0:2.2.3-6.11.s390x",
"product_id": "python-0:2.2.3-6.11.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.s390x",
"product": {
"name": "tkinter-0:2.2.3-6.11.s390x",
"product_id": "tkinter-0:2.2.3-6.11.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.s390x",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.s390x",
"product_id": "python-debuginfo-0:2.2.3-6.11.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.s390",
"product": {
"name": "python-devel-0:2.2.3-6.11.s390",
"product_id": "python-devel-0:2.2.3-6.11.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.s390",
"product": {
"name": "python-tools-0:2.2.3-6.11.s390",
"product_id": "python-tools-0:2.2.3-6.11.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.s390",
"product": {
"name": "python-0:2.2.3-6.11.s390",
"product_id": "python-0:2.2.3-6.11.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=s390"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.s390",
"product": {
"name": "tkinter-0:2.2.3-6.11.s390",
"product_id": "tkinter-0:2.2.3-6.11.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.s390",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.s390",
"product_id": "python-debuginfo-0:2.2.3-6.11.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.i386"
},
"product_reference": "python-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.ia64"
},
"product_reference": "python-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.ppc"
},
"product_reference": "python-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.s390"
},
"product_reference": "python-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.s390x"
},
"product_reference": "python-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.src"
},
"product_reference": "python-0:2.2.3-6.11.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.i386"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.ia64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.ppc"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.s390"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.s390x"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.i386"
},
"product_reference": "python-devel-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.ia64"
},
"product_reference": "python-devel-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.ppc"
},
"product_reference": "python-devel-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.s390"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.s390x"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-devel-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.i386"
},
"product_reference": "python-tools-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.ia64"
},
"product_reference": "python-tools-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.ppc"
},
"product_reference": "python-tools-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.s390"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.s390x"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-tools-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.i386"
},
"product_reference": "tkinter-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.ia64"
},
"product_reference": "tkinter-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.ppc"
},
"product_reference": "tkinter-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.s390"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.s390x"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.x86_64"
},
"product_reference": "tkinter-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.i386"
},
"product_reference": "python-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.ia64"
},
"product_reference": "python-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.ppc"
},
"product_reference": "python-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.s390"
},
"product_reference": "python-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.s390x"
},
"product_reference": "python-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.src"
},
"product_reference": "python-0:2.2.3-6.11.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.i386"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.ia64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.ppc"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.s390"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.s390x"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.i386"
},
"product_reference": "python-devel-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.ia64"
},
"product_reference": "python-devel-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.ppc"
},
"product_reference": "python-devel-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.s390"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.s390x"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-devel-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.i386"
},
"product_reference": "python-tools-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.ia64"
},
"product_reference": "python-tools-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.ppc"
},
"product_reference": "python-tools-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.s390"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.s390x"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-tools-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.i386"
},
"product_reference": "tkinter-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.ia64"
},
"product_reference": "tkinter-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.ppc"
},
"product_reference": "tkinter-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.s390"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.s390x"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.x86_64"
},
"product_reference": "tkinter-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.i386"
},
"product_reference": "python-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.ia64"
},
"product_reference": "python-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.ppc"
},
"product_reference": "python-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.s390"
},
"product_reference": "python-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.s390x"
},
"product_reference": "python-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.src"
},
"product_reference": "python-0:2.2.3-6.11.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.i386"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.ia64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.ppc"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.s390"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.s390x"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.i386"
},
"product_reference": "python-devel-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.ia64"
},
"product_reference": "python-devel-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.ppc"
},
"product_reference": "python-devel-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.s390"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.s390x"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-devel-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.i386"
},
"product_reference": "python-tools-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.ia64"
},
"product_reference": "python-tools-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.ppc"
},
"product_reference": "python-tools-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.s390"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.s390x"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-tools-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.i386"
},
"product_reference": "tkinter-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.ia64"
},
"product_reference": "tkinter-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.ppc"
},
"product_reference": "tkinter-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.s390"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.s390x"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.x86_64"
},
"product_reference": "tkinter-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.i386"
},
"product_reference": "python-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.ia64"
},
"product_reference": "python-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.ppc"
},
"product_reference": "python-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.s390"
},
"product_reference": "python-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.s390x"
},
"product_reference": "python-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.src"
},
"product_reference": "python-0:2.2.3-6.11.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.i386"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.ia64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.ppc"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.s390"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.s390x"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.i386"
},
"product_reference": "python-devel-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.ia64"
},
"product_reference": "python-devel-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.ppc"
},
"product_reference": "python-devel-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.s390"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.s390x"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-devel-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.i386"
},
"product_reference": "python-tools-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.ia64"
},
"product_reference": "python-tools-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.ppc"
},
"product_reference": "python-tools-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.s390"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.s390x"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-tools-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.i386"
},
"product_reference": "tkinter-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.ia64"
},
"product_reference": "tkinter-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.ppc"
},
"product_reference": "tkinter-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.s390"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.s390x"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.x86_64"
},
"product_reference": "tkinter-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3WS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"David Remahl"
],
"organization": "Apple Product Security team"
}
],
"cve": "CVE-2008-1679",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-04-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "441306"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: imageop module integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1679"
},
{
"category": "external",
"summary": "RHBZ#441306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=441306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1679",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1679"
}
],
"release_date": "2008-03-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: imageop module integer overflows"
},
{
"cve": "CVE-2008-1887",
"discovery_date": "2008-04-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "443810"
}
],
"notes": [
{
"category": "description",
"text": "Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: PyString_FromStringAndSize does not check for negative size values",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1887"
},
{
"category": "external",
"summary": "RHBZ#443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1887",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887"
}
],
"release_date": "2008-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: PyString_FromStringAndSize does not check for negative size values"
},
{
"acknowledgments": [
{
"names": [
"David Remahl"
],
"organization": "Apple Product Security team"
}
],
"cve": "CVE-2008-2315",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455008"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows in python core",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2315"
},
{
"category": "external",
"summary": "RHBZ#455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315"
}
],
"release_date": "2008-07-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows in python core"
},
{
"cve": "CVE-2008-3142",
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "454990"
}
],
"notes": [
{
"category": "description",
"text": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple buffer overflows in unicode processing",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3142"
},
{
"category": "external",
"summary": "RHBZ#454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142"
}
],
"release_date": "2008-04-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple buffer overflows in unicode processing"
},
{
"cve": "CVE-2008-3143",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455013"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows discovered by Google",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3143"
},
{
"category": "external",
"summary": "RHBZ#455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3143",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143"
}
],
"release_date": "2008-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows discovered by Google"
},
{
"cve": "CVE-2008-3144",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455018"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3144"
},
{
"category": "external",
"summary": "RHBZ#455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144"
}
],
"release_date": "2008-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function"
},
{
"cve": "CVE-2008-4864",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "469656"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: imageop module multiple integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-4864"
},
{
"category": "external",
"summary": "RHBZ#469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-4864",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: imageop module multiple integer overflows"
},
{
"cve": "CVE-2008-5031",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "470915"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: stringobject, unicodeobject integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-5031"
},
{
"category": "external",
"summary": "RHBZ#470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-5031",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: stringobject, unicodeobject integer overflows"
}
]
}
RHSA-2009:1178
Vulnerability from csaf_redhat - Published: 2009-07-27 09:32 - Updated: 2025-11-21 17:34Summary
Red Hat Security Advisory: python security update
Notes
Topic
Updated python packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 3.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
Python is an interpreted, interactive, object-oriented programming
language.
When the assert() system call was disabled, an input sanitization flaw was
revealed in the Python string object implementation that led to a buffer
overflow. The missing check for negative size values meant the Python
memory allocator could allocate less memory than expected. This could
result in arbitrary code execution with the Python interpreter's
privileges. (CVE-2008-1887)
Multiple buffer and integer overflow flaws were found in the Python Unicode
string processing and in the Python Unicode and string object
implementations. An attacker could use these flaws to cause a denial of
service (Python application crash). (CVE-2008-3142, CVE-2008-5031)
Multiple integer overflow flaws were found in the Python imageop module. If
a Python application used the imageop module to process untrusted images,
it could cause the application to crash or, potentially, execute arbitrary
code with the Python interpreter's privileges. (CVE-2008-1679,
CVE-2008-4864)
Multiple integer underflow and overflow flaws were found in the Python
snprintf() wrapper implementation. An attacker could use these flaws to
cause a denial of service (memory corruption). (CVE-2008-3144)
Multiple integer overflow flaws were found in various Python modules. An
attacker could use these flaws to cause a denial of service (Python
application crash). (CVE-2008-2315, CVE-2008-3143)
Red Hat would like to thank David Remahl of the Apple Product Security team
for responsibly reporting the CVE-2008-1679 and CVE-2008-2315 issues.
All Python users should upgrade to these updated packages, which contain
backported patches to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated python packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 3.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming\nlanguage.\n\nWhen the assert() system call was disabled, an input sanitization flaw was\nrevealed in the Python string object implementation that led to a buffer\noverflow. The missing check for negative size values meant the Python\nmemory allocator could allocate less memory than expected. This could\nresult in arbitrary code execution with the Python interpreter\u0027s\nprivileges. (CVE-2008-1887)\n\nMultiple buffer and integer overflow flaws were found in the Python Unicode\nstring processing and in the Python Unicode and string object\nimplementations. An attacker could use these flaws to cause a denial of\nservice (Python application crash). (CVE-2008-3142, CVE-2008-5031)\n\nMultiple integer overflow flaws were found in the Python imageop module. If\na Python application used the imageop module to process untrusted images,\nit could cause the application to crash or, potentially, execute arbitrary\ncode with the Python interpreter\u0027s privileges. (CVE-2008-1679,\nCVE-2008-4864)\n\nMultiple integer underflow and overflow flaws were found in the Python\nsnprintf() wrapper implementation. An attacker could use these flaws to\ncause a denial of service (memory corruption). (CVE-2008-3144)\n\nMultiple integer overflow flaws were found in various Python modules. An\nattacker could use these flaws to cause a denial of service (Python\napplication crash). (CVE-2008-2315, CVE-2008-3143)\n\nRed Hat would like to thank David Remahl of the Apple Product Security team\nfor responsibly reporting the CVE-2008-1679 and CVE-2008-2315 issues.\n\nAll Python users should upgrade to these updated packages, which contain\nbackported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1178",
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
},
{
"category": "external",
"summary": "443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "441306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=441306"
},
{
"category": "external",
"summary": "454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1178.json"
}
],
"title": "Red Hat Security Advisory: python security update",
"tracking": {
"current_release_date": "2025-11-21T17:34:59+00:00",
"generator": {
"date": "2025-11-21T17:34:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1178",
"initial_release_date": "2009-07-27T09:32:00+00:00",
"revision_history": [
{
"date": "2009-07-27T09:32:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-27T05:36:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:34:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.ia64",
"product": {
"name": "python-devel-0:2.2.3-6.11.ia64",
"product_id": "python-devel-0:2.2.3-6.11.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.ia64",
"product": {
"name": "python-tools-0:2.2.3-6.11.ia64",
"product_id": "python-tools-0:2.2.3-6.11.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.ia64",
"product": {
"name": "python-0:2.2.3-6.11.ia64",
"product_id": "python-0:2.2.3-6.11.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.ia64",
"product": {
"name": "tkinter-0:2.2.3-6.11.ia64",
"product_id": "tkinter-0:2.2.3-6.11.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.ia64",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.ia64",
"product_id": "python-debuginfo-0:2.2.3-6.11.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.x86_64",
"product": {
"name": "python-devel-0:2.2.3-6.11.x86_64",
"product_id": "python-devel-0:2.2.3-6.11.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.x86_64",
"product": {
"name": "python-tools-0:2.2.3-6.11.x86_64",
"product_id": "python-tools-0:2.2.3-6.11.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.x86_64",
"product": {
"name": "python-0:2.2.3-6.11.x86_64",
"product_id": "python-0:2.2.3-6.11.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.x86_64",
"product": {
"name": "tkinter-0:2.2.3-6.11.x86_64",
"product_id": "tkinter-0:2.2.3-6.11.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.x86_64",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.x86_64",
"product_id": "python-debuginfo-0:2.2.3-6.11.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.i386",
"product": {
"name": "python-devel-0:2.2.3-6.11.i386",
"product_id": "python-devel-0:2.2.3-6.11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.i386",
"product": {
"name": "python-tools-0:2.2.3-6.11.i386",
"product_id": "python-tools-0:2.2.3-6.11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.i386",
"product": {
"name": "python-0:2.2.3-6.11.i386",
"product_id": "python-0:2.2.3-6.11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.i386",
"product": {
"name": "tkinter-0:2.2.3-6.11.i386",
"product_id": "tkinter-0:2.2.3-6.11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.i386",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.i386",
"product_id": "python-debuginfo-0:2.2.3-6.11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.src",
"product": {
"name": "python-0:2.2.3-6.11.src",
"product_id": "python-0:2.2.3-6.11.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.ppc",
"product": {
"name": "python-devel-0:2.2.3-6.11.ppc",
"product_id": "python-devel-0:2.2.3-6.11.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.ppc",
"product": {
"name": "python-tools-0:2.2.3-6.11.ppc",
"product_id": "python-tools-0:2.2.3-6.11.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.ppc",
"product": {
"name": "python-0:2.2.3-6.11.ppc",
"product_id": "python-0:2.2.3-6.11.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.ppc",
"product": {
"name": "tkinter-0:2.2.3-6.11.ppc",
"product_id": "tkinter-0:2.2.3-6.11.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.ppc",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.ppc",
"product_id": "python-debuginfo-0:2.2.3-6.11.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.s390x",
"product": {
"name": "python-devel-0:2.2.3-6.11.s390x",
"product_id": "python-devel-0:2.2.3-6.11.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.s390x",
"product": {
"name": "python-tools-0:2.2.3-6.11.s390x",
"product_id": "python-tools-0:2.2.3-6.11.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.s390x",
"product": {
"name": "python-0:2.2.3-6.11.s390x",
"product_id": "python-0:2.2.3-6.11.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.s390x",
"product": {
"name": "tkinter-0:2.2.3-6.11.s390x",
"product_id": "tkinter-0:2.2.3-6.11.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.s390x",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.s390x",
"product_id": "python-debuginfo-0:2.2.3-6.11.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python-devel-0:2.2.3-6.11.s390",
"product": {
"name": "python-devel-0:2.2.3-6.11.s390",
"product_id": "python-devel-0:2.2.3-6.11.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.2.3-6.11?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.2.3-6.11.s390",
"product": {
"name": "python-tools-0:2.2.3-6.11.s390",
"product_id": "python-tools-0:2.2.3-6.11.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.2.3-6.11?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-0:2.2.3-6.11.s390",
"product": {
"name": "python-0:2.2.3-6.11.s390",
"product_id": "python-0:2.2.3-6.11.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.2.3-6.11?arch=s390"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.2.3-6.11.s390",
"product": {
"name": "tkinter-0:2.2.3-6.11.s390",
"product_id": "tkinter-0:2.2.3-6.11.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.2.3-6.11?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.2.3-6.11.s390",
"product": {
"name": "python-debuginfo-0:2.2.3-6.11.s390",
"product_id": "python-debuginfo-0:2.2.3-6.11.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.2.3-6.11?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.i386"
},
"product_reference": "python-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.ia64"
},
"product_reference": "python-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.ppc"
},
"product_reference": "python-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.s390"
},
"product_reference": "python-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.s390x"
},
"product_reference": "python-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.src"
},
"product_reference": "python-0:2.2.3-6.11.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.i386"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.ia64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.ppc"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.s390"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.s390x"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-debuginfo-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.i386"
},
"product_reference": "python-devel-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.ia64"
},
"product_reference": "python-devel-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.ppc"
},
"product_reference": "python-devel-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.s390"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.s390x"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-devel-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-devel-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.i386"
},
"product_reference": "python-tools-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.ia64"
},
"product_reference": "python-tools-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.ppc"
},
"product_reference": "python-tools-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.s390"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.s390x"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:python-tools-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-tools-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.i386"
},
"product_reference": "tkinter-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.ia64"
},
"product_reference": "tkinter-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.ppc"
},
"product_reference": "tkinter-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.s390"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.s390x"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:tkinter-0:2.2.3-6.11.x86_64"
},
"product_reference": "tkinter-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.i386"
},
"product_reference": "python-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.ia64"
},
"product_reference": "python-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.ppc"
},
"product_reference": "python-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.s390"
},
"product_reference": "python-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.s390x"
},
"product_reference": "python-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.src"
},
"product_reference": "python-0:2.2.3-6.11.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.i386"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.ia64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.ppc"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.s390"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.s390x"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.i386"
},
"product_reference": "python-devel-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.ia64"
},
"product_reference": "python-devel-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.ppc"
},
"product_reference": "python-devel-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.s390"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.s390x"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-devel-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-devel-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.i386"
},
"product_reference": "python-tools-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.ia64"
},
"product_reference": "python-tools-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.ppc"
},
"product_reference": "python-tools-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.s390"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.s390x"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:python-tools-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-tools-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.i386"
},
"product_reference": "tkinter-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.ia64"
},
"product_reference": "tkinter-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.ppc"
},
"product_reference": "tkinter-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.s390"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.s390x"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:tkinter-0:2.2.3-6.11.x86_64"
},
"product_reference": "tkinter-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.i386"
},
"product_reference": "python-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.ia64"
},
"product_reference": "python-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.ppc"
},
"product_reference": "python-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.s390"
},
"product_reference": "python-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.s390x"
},
"product_reference": "python-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.src"
},
"product_reference": "python-0:2.2.3-6.11.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.i386"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.ia64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.ppc"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.s390"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.s390x"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-debuginfo-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.i386"
},
"product_reference": "python-devel-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.ia64"
},
"product_reference": "python-devel-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.ppc"
},
"product_reference": "python-devel-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.s390"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.s390x"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-devel-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-devel-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.i386"
},
"product_reference": "python-tools-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.ia64"
},
"product_reference": "python-tools-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.ppc"
},
"product_reference": "python-tools-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.s390"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.s390x"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:python-tools-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-tools-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.i386"
},
"product_reference": "tkinter-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.ia64"
},
"product_reference": "tkinter-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.ppc"
},
"product_reference": "tkinter-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.s390"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.s390x"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:tkinter-0:2.2.3-6.11.x86_64"
},
"product_reference": "tkinter-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.i386"
},
"product_reference": "python-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.ia64"
},
"product_reference": "python-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.ppc"
},
"product_reference": "python-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.s390"
},
"product_reference": "python-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.s390x"
},
"product_reference": "python-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.src"
},
"product_reference": "python-0:2.2.3-6.11.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.i386"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.ia64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.ppc"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.s390"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.s390x"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-debuginfo-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-debuginfo-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.i386"
},
"product_reference": "python-devel-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.ia64"
},
"product_reference": "python-devel-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.ppc"
},
"product_reference": "python-devel-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.s390"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.s390x"
},
"product_reference": "python-devel-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-devel-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-devel-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.i386"
},
"product_reference": "python-tools-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.ia64"
},
"product_reference": "python-tools-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.ppc"
},
"product_reference": "python-tools-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.s390"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.s390x"
},
"product_reference": "python-tools-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:python-tools-0:2.2.3-6.11.x86_64"
},
"product_reference": "python-tools-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.i386"
},
"product_reference": "tkinter-0:2.2.3-6.11.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.ia64"
},
"product_reference": "tkinter-0:2.2.3-6.11.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.ppc"
},
"product_reference": "tkinter-0:2.2.3-6.11.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.s390"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.s390x"
},
"product_reference": "tkinter-0:2.2.3-6.11.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.2.3-6.11.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:tkinter-0:2.2.3-6.11.x86_64"
},
"product_reference": "tkinter-0:2.2.3-6.11.x86_64",
"relates_to_product_reference": "3WS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"David Remahl"
],
"organization": "Apple Product Security team"
}
],
"cve": "CVE-2008-1679",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-04-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "441306"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: imageop module integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1679"
},
{
"category": "external",
"summary": "RHBZ#441306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=441306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1679",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1679"
}
],
"release_date": "2008-03-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: imageop module integer overflows"
},
{
"cve": "CVE-2008-1887",
"discovery_date": "2008-04-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "443810"
}
],
"notes": [
{
"category": "description",
"text": "Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: PyString_FromStringAndSize does not check for negative size values",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1887"
},
{
"category": "external",
"summary": "RHBZ#443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1887",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887"
}
],
"release_date": "2008-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: PyString_FromStringAndSize does not check for negative size values"
},
{
"acknowledgments": [
{
"names": [
"David Remahl"
],
"organization": "Apple Product Security team"
}
],
"cve": "CVE-2008-2315",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455008"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows in python core",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2315"
},
{
"category": "external",
"summary": "RHBZ#455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315"
}
],
"release_date": "2008-07-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows in python core"
},
{
"cve": "CVE-2008-3142",
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "454990"
}
],
"notes": [
{
"category": "description",
"text": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple buffer overflows in unicode processing",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3142"
},
{
"category": "external",
"summary": "RHBZ#454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142"
}
],
"release_date": "2008-04-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple buffer overflows in unicode processing"
},
{
"cve": "CVE-2008-3143",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455013"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows discovered by Google",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3143"
},
{
"category": "external",
"summary": "RHBZ#455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3143",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143"
}
],
"release_date": "2008-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows discovered by Google"
},
{
"cve": "CVE-2008-3144",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455018"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3144"
},
{
"category": "external",
"summary": "RHBZ#455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144"
}
],
"release_date": "2008-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function"
},
{
"cve": "CVE-2008-4864",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "469656"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: imageop module multiple integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-4864"
},
{
"category": "external",
"summary": "RHBZ#469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-4864",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: imageop module multiple integer overflows"
},
{
"cve": "CVE-2008-5031",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "470915"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: stringobject, unicodeobject integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-5031"
},
{
"category": "external",
"summary": "RHBZ#470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-5031",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:32:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"3AS:python-0:2.2.3-6.11.i386",
"3AS:python-0:2.2.3-6.11.ia64",
"3AS:python-0:2.2.3-6.11.ppc",
"3AS:python-0:2.2.3-6.11.s390",
"3AS:python-0:2.2.3-6.11.s390x",
"3AS:python-0:2.2.3-6.11.src",
"3AS:python-0:2.2.3-6.11.x86_64",
"3AS:python-debuginfo-0:2.2.3-6.11.i386",
"3AS:python-debuginfo-0:2.2.3-6.11.ia64",
"3AS:python-debuginfo-0:2.2.3-6.11.ppc",
"3AS:python-debuginfo-0:2.2.3-6.11.s390",
"3AS:python-debuginfo-0:2.2.3-6.11.s390x",
"3AS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3AS:python-devel-0:2.2.3-6.11.i386",
"3AS:python-devel-0:2.2.3-6.11.ia64",
"3AS:python-devel-0:2.2.3-6.11.ppc",
"3AS:python-devel-0:2.2.3-6.11.s390",
"3AS:python-devel-0:2.2.3-6.11.s390x",
"3AS:python-devel-0:2.2.3-6.11.x86_64",
"3AS:python-tools-0:2.2.3-6.11.i386",
"3AS:python-tools-0:2.2.3-6.11.ia64",
"3AS:python-tools-0:2.2.3-6.11.ppc",
"3AS:python-tools-0:2.2.3-6.11.s390",
"3AS:python-tools-0:2.2.3-6.11.s390x",
"3AS:python-tools-0:2.2.3-6.11.x86_64",
"3AS:tkinter-0:2.2.3-6.11.i386",
"3AS:tkinter-0:2.2.3-6.11.ia64",
"3AS:tkinter-0:2.2.3-6.11.ppc",
"3AS:tkinter-0:2.2.3-6.11.s390",
"3AS:tkinter-0:2.2.3-6.11.s390x",
"3AS:tkinter-0:2.2.3-6.11.x86_64",
"3Desktop:python-0:2.2.3-6.11.i386",
"3Desktop:python-0:2.2.3-6.11.ia64",
"3Desktop:python-0:2.2.3-6.11.ppc",
"3Desktop:python-0:2.2.3-6.11.s390",
"3Desktop:python-0:2.2.3-6.11.s390x",
"3Desktop:python-0:2.2.3-6.11.src",
"3Desktop:python-0:2.2.3-6.11.x86_64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.i386",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ia64",
"3Desktop:python-debuginfo-0:2.2.3-6.11.ppc",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390",
"3Desktop:python-debuginfo-0:2.2.3-6.11.s390x",
"3Desktop:python-debuginfo-0:2.2.3-6.11.x86_64",
"3Desktop:python-devel-0:2.2.3-6.11.i386",
"3Desktop:python-devel-0:2.2.3-6.11.ia64",
"3Desktop:python-devel-0:2.2.3-6.11.ppc",
"3Desktop:python-devel-0:2.2.3-6.11.s390",
"3Desktop:python-devel-0:2.2.3-6.11.s390x",
"3Desktop:python-devel-0:2.2.3-6.11.x86_64",
"3Desktop:python-tools-0:2.2.3-6.11.i386",
"3Desktop:python-tools-0:2.2.3-6.11.ia64",
"3Desktop:python-tools-0:2.2.3-6.11.ppc",
"3Desktop:python-tools-0:2.2.3-6.11.s390",
"3Desktop:python-tools-0:2.2.3-6.11.s390x",
"3Desktop:python-tools-0:2.2.3-6.11.x86_64",
"3Desktop:tkinter-0:2.2.3-6.11.i386",
"3Desktop:tkinter-0:2.2.3-6.11.ia64",
"3Desktop:tkinter-0:2.2.3-6.11.ppc",
"3Desktop:tkinter-0:2.2.3-6.11.s390",
"3Desktop:tkinter-0:2.2.3-6.11.s390x",
"3Desktop:tkinter-0:2.2.3-6.11.x86_64",
"3ES:python-0:2.2.3-6.11.i386",
"3ES:python-0:2.2.3-6.11.ia64",
"3ES:python-0:2.2.3-6.11.ppc",
"3ES:python-0:2.2.3-6.11.s390",
"3ES:python-0:2.2.3-6.11.s390x",
"3ES:python-0:2.2.3-6.11.src",
"3ES:python-0:2.2.3-6.11.x86_64",
"3ES:python-debuginfo-0:2.2.3-6.11.i386",
"3ES:python-debuginfo-0:2.2.3-6.11.ia64",
"3ES:python-debuginfo-0:2.2.3-6.11.ppc",
"3ES:python-debuginfo-0:2.2.3-6.11.s390",
"3ES:python-debuginfo-0:2.2.3-6.11.s390x",
"3ES:python-debuginfo-0:2.2.3-6.11.x86_64",
"3ES:python-devel-0:2.2.3-6.11.i386",
"3ES:python-devel-0:2.2.3-6.11.ia64",
"3ES:python-devel-0:2.2.3-6.11.ppc",
"3ES:python-devel-0:2.2.3-6.11.s390",
"3ES:python-devel-0:2.2.3-6.11.s390x",
"3ES:python-devel-0:2.2.3-6.11.x86_64",
"3ES:python-tools-0:2.2.3-6.11.i386",
"3ES:python-tools-0:2.2.3-6.11.ia64",
"3ES:python-tools-0:2.2.3-6.11.ppc",
"3ES:python-tools-0:2.2.3-6.11.s390",
"3ES:python-tools-0:2.2.3-6.11.s390x",
"3ES:python-tools-0:2.2.3-6.11.x86_64",
"3ES:tkinter-0:2.2.3-6.11.i386",
"3ES:tkinter-0:2.2.3-6.11.ia64",
"3ES:tkinter-0:2.2.3-6.11.ppc",
"3ES:tkinter-0:2.2.3-6.11.s390",
"3ES:tkinter-0:2.2.3-6.11.s390x",
"3ES:tkinter-0:2.2.3-6.11.x86_64",
"3WS:python-0:2.2.3-6.11.i386",
"3WS:python-0:2.2.3-6.11.ia64",
"3WS:python-0:2.2.3-6.11.ppc",
"3WS:python-0:2.2.3-6.11.s390",
"3WS:python-0:2.2.3-6.11.s390x",
"3WS:python-0:2.2.3-6.11.src",
"3WS:python-0:2.2.3-6.11.x86_64",
"3WS:python-debuginfo-0:2.2.3-6.11.i386",
"3WS:python-debuginfo-0:2.2.3-6.11.ia64",
"3WS:python-debuginfo-0:2.2.3-6.11.ppc",
"3WS:python-debuginfo-0:2.2.3-6.11.s390",
"3WS:python-debuginfo-0:2.2.3-6.11.s390x",
"3WS:python-debuginfo-0:2.2.3-6.11.x86_64",
"3WS:python-devel-0:2.2.3-6.11.i386",
"3WS:python-devel-0:2.2.3-6.11.ia64",
"3WS:python-devel-0:2.2.3-6.11.ppc",
"3WS:python-devel-0:2.2.3-6.11.s390",
"3WS:python-devel-0:2.2.3-6.11.s390x",
"3WS:python-devel-0:2.2.3-6.11.x86_64",
"3WS:python-tools-0:2.2.3-6.11.i386",
"3WS:python-tools-0:2.2.3-6.11.ia64",
"3WS:python-tools-0:2.2.3-6.11.ppc",
"3WS:python-tools-0:2.2.3-6.11.s390",
"3WS:python-tools-0:2.2.3-6.11.s390x",
"3WS:python-tools-0:2.2.3-6.11.x86_64",
"3WS:tkinter-0:2.2.3-6.11.i386",
"3WS:tkinter-0:2.2.3-6.11.ia64",
"3WS:tkinter-0:2.2.3-6.11.ppc",
"3WS:tkinter-0:2.2.3-6.11.s390",
"3WS:tkinter-0:2.2.3-6.11.s390x",
"3WS:tkinter-0:2.2.3-6.11.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1178"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: stringobject, unicodeobject integer overflows"
}
]
}
RHSA-2009_1177
Vulnerability from csaf_redhat - Published: 2009-07-27 09:34 - Updated: 2024-11-22 02:31Summary
Red Hat Security Advisory: python security update
Notes
Topic
Updated python packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 4.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
Python is an interpreted, interactive, object-oriented programming
language.
When the assert() system call was disabled, an input sanitization flaw was
revealed in the Python string object implementation that led to a buffer
overflow. The missing check for negative size values meant the Python
memory allocator could allocate less memory than expected. This could
result in arbitrary code execution with the Python interpreter's
privileges. (CVE-2008-1887)
Multiple buffer and integer overflow flaws were found in the Python Unicode
string processing and in the Python Unicode and string object
implementations. An attacker could use these flaws to cause a denial of
service (Python application crash). (CVE-2008-3142, CVE-2008-5031)
Multiple integer overflow flaws were found in the Python imageop module. If
a Python application used the imageop module to process untrusted images,
it could cause the application to crash or, potentially, execute arbitrary
code with the Python interpreter's privileges. (CVE-2008-1679,
CVE-2008-4864)
Multiple integer underflow and overflow flaws were found in the Python
snprintf() wrapper implementation. An attacker could use these flaws to
cause a denial of service (memory corruption). (CVE-2008-3144)
Multiple integer overflow flaws were found in various Python modules. An
attacker could use these flaws to cause a denial of service (Python
application crash). (CVE-2008-2315, CVE-2008-3143)
An integer signedness error, leading to a buffer overflow, was found
in the Python zlib extension module. If a Python application requested
the negative byte count be flushed for a decompression stream, it could
cause the application to crash or, potentially, execute arbitrary code
with the Python interpreter's privileges. (CVE-2008-1721)
Red Hat would like to thank David Remahl of the Apple Product Security team
for responsibly reporting the CVE-2008-1679 and CVE-2008-2315 issues.
All Python users should upgrade to these updated packages, which contain
backported patches to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated python packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 4.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming\nlanguage.\n\nWhen the assert() system call was disabled, an input sanitization flaw was\nrevealed in the Python string object implementation that led to a buffer\noverflow. The missing check for negative size values meant the Python\nmemory allocator could allocate less memory than expected. This could\nresult in arbitrary code execution with the Python interpreter\u0027s\nprivileges. (CVE-2008-1887)\n\nMultiple buffer and integer overflow flaws were found in the Python Unicode\nstring processing and in the Python Unicode and string object\nimplementations. An attacker could use these flaws to cause a denial of\nservice (Python application crash). (CVE-2008-3142, CVE-2008-5031)\n\nMultiple integer overflow flaws were found in the Python imageop module. If\na Python application used the imageop module to process untrusted images,\nit could cause the application to crash or, potentially, execute arbitrary\ncode with the Python interpreter\u0027s privileges. (CVE-2008-1679,\nCVE-2008-4864)\n\nMultiple integer underflow and overflow flaws were found in the Python\nsnprintf() wrapper implementation. An attacker could use these flaws to\ncause a denial of service (memory corruption). (CVE-2008-3144)\n\nMultiple integer overflow flaws were found in various Python modules. An\nattacker could use these flaws to cause a denial of service (Python\napplication crash). (CVE-2008-2315, CVE-2008-3143)\n\nAn integer signedness error, leading to a buffer overflow, was found\nin the Python zlib extension module. If a Python application requested\nthe negative byte count be flushed for a decompression stream, it could\ncause the application to crash or, potentially, execute arbitrary code\nwith the Python interpreter\u0027s privileges. (CVE-2008-1721)\n\nRed Hat would like to thank David Remahl of the Apple Product Security team\nfor responsibly reporting the CVE-2008-1679 and CVE-2008-2315 issues.\n\nAll Python users should upgrade to these updated packages, which contain\nbackported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1177",
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "441306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=441306"
},
{
"category": "external",
"summary": "442005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=442005"
},
{
"category": "external",
"summary": "443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1177.json"
}
],
"title": "Red Hat Security Advisory: python security update",
"tracking": {
"current_release_date": "2024-11-22T02:31:42+00:00",
"generator": {
"date": "2024-11-22T02:31:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2009:1177",
"initial_release_date": "2009-07-27T09:34:00+00:00",
"revision_history": [
{
"date": "2009-07-27T09:34:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-27T05:35:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T02:31:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "python-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.src",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.src",
"product_id": "python-0:2.3.4-14.7.el4_8.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "python-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "python-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "python-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "python-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.src"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.src"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.src"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.src"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"David Remahl"
],
"organization": "Apple Product Security team"
}
],
"cve": "CVE-2008-1679",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-04-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "441306"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: imageop module integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1679"
},
{
"category": "external",
"summary": "RHBZ#441306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=441306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1679",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1679"
}
],
"release_date": "2008-03-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: imageop module integer overflows"
},
{
"cve": "CVE-2008-1721",
"discovery_date": "2008-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "442005"
}
],
"notes": [
{
"category": "description",
"text": "Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: integer signedness error in the zlib extension module",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=442005\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1721"
},
{
"category": "external",
"summary": "RHBZ#442005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=442005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1721",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1721"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1721",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1721"
}
],
"release_date": "2008-04-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: integer signedness error in the zlib extension module"
},
{
"cve": "CVE-2008-1887",
"discovery_date": "2008-04-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "443810"
}
],
"notes": [
{
"category": "description",
"text": "Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: PyString_FromStringAndSize does not check for negative size values",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1887"
},
{
"category": "external",
"summary": "RHBZ#443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1887",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887"
}
],
"release_date": "2008-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: PyString_FromStringAndSize does not check for negative size values"
},
{
"acknowledgments": [
{
"names": [
"David Remahl"
],
"organization": "Apple Product Security team"
}
],
"cve": "CVE-2008-2315",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455008"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows in python core",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2315"
},
{
"category": "external",
"summary": "RHBZ#455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315"
}
],
"release_date": "2008-07-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows in python core"
},
{
"cve": "CVE-2008-3142",
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "454990"
}
],
"notes": [
{
"category": "description",
"text": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple buffer overflows in unicode processing",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3142"
},
{
"category": "external",
"summary": "RHBZ#454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142"
}
],
"release_date": "2008-04-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple buffer overflows in unicode processing"
},
{
"cve": "CVE-2008-3143",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455013"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows discovered by Google",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3143"
},
{
"category": "external",
"summary": "RHBZ#455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3143",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143"
}
],
"release_date": "2008-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows discovered by Google"
},
{
"cve": "CVE-2008-3144",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455018"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3144"
},
{
"category": "external",
"summary": "RHBZ#455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144"
}
],
"release_date": "2008-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function"
},
{
"cve": "CVE-2008-4864",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "469656"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: imageop module multiple integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-4864"
},
{
"category": "external",
"summary": "RHBZ#469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-4864",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: imageop module multiple integer overflows"
},
{
"cve": "CVE-2008-5031",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "470915"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: stringobject, unicodeobject integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-5031"
},
{
"category": "external",
"summary": "RHBZ#470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-5031",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: stringobject, unicodeobject integer overflows"
}
]
}
RHSA-2009_1176
Vulnerability from csaf_redhat - Published: 2009-07-27 09:22 - Updated: 2024-11-22 02:31Summary
Red Hat Security Advisory: python security update
Notes
Topic
Updated python packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 5.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
Python is an interpreted, interactive, object-oriented programming
language.
When the assert() system call was disabled, an input sanitization flaw was
revealed in the Python string object implementation that led to a buffer
overflow. The missing check for negative size values meant the Python
memory allocator could allocate less memory than expected. This could
result in arbitrary code execution with the Python interpreter's
privileges. (CVE-2008-1887)
Multiple buffer and integer overflow flaws were found in the Python Unicode
string processing and in the Python Unicode and string object
implementations. An attacker could use these flaws to cause a denial of
service (Python application crash). (CVE-2008-3142, CVE-2008-5031)
Multiple integer overflow flaws were found in the Python imageop module. If
a Python application used the imageop module to process untrusted images,
it could cause the application to disclose sensitive information, crash or,
potentially, execute arbitrary code with the Python interpreter's
privileges. (CVE-2007-4965, CVE-2008-4864)
Multiple integer underflow and overflow flaws were found in the Python
snprintf() wrapper implementation. An attacker could use these flaws to
cause a denial of service (memory corruption). (CVE-2008-3144)
Multiple integer overflow flaws were found in various Python modules. An
attacker could use these flaws to cause a denial of service (Python
application crash). (CVE-2008-2315, CVE-2008-3143)
An integer signedness error, leading to a buffer overflow, was found
in the Python zlib extension module. If a Python application requested
the negative byte count be flushed for a decompression stream, it could
cause the application to crash or, potentially, execute arbitrary code
with the Python interpreter's privileges. (CVE-2008-1721)
A flaw was discovered in the strxfrm() function of the Python locale
module. Strings generated by this function were not properly
NULL-terminated, which could possibly cause disclosure of data stored in
the memory of a Python application using this function. (CVE-2007-2052)
Red Hat would like to thank David Remahl of the Apple Product Security team
for responsibly reporting the CVE-2008-2315 issue.
All Python users should upgrade to these updated packages, which contain
backported patches to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated python packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming\nlanguage.\n\nWhen the assert() system call was disabled, an input sanitization flaw was\nrevealed in the Python string object implementation that led to a buffer\noverflow. The missing check for negative size values meant the Python\nmemory allocator could allocate less memory than expected. This could\nresult in arbitrary code execution with the Python interpreter\u0027s\nprivileges. (CVE-2008-1887)\n\nMultiple buffer and integer overflow flaws were found in the Python Unicode\nstring processing and in the Python Unicode and string object\nimplementations. An attacker could use these flaws to cause a denial of\nservice (Python application crash). (CVE-2008-3142, CVE-2008-5031)\n\nMultiple integer overflow flaws were found in the Python imageop module. If\na Python application used the imageop module to process untrusted images,\nit could cause the application to disclose sensitive information, crash or,\npotentially, execute arbitrary code with the Python interpreter\u0027s\nprivileges. (CVE-2007-4965, CVE-2008-4864)\n\nMultiple integer underflow and overflow flaws were found in the Python\nsnprintf() wrapper implementation. An attacker could use these flaws to\ncause a denial of service (memory corruption). (CVE-2008-3144)\n\nMultiple integer overflow flaws were found in various Python modules. An\nattacker could use these flaws to cause a denial of service (Python\napplication crash). (CVE-2008-2315, CVE-2008-3143)\n\nAn integer signedness error, leading to a buffer overflow, was found\nin the Python zlib extension module. If a Python application requested\nthe negative byte count be flushed for a decompression stream, it could\ncause the application to crash or, potentially, execute arbitrary code\nwith the Python interpreter\u0027s privileges. (CVE-2008-1721)\n\nA flaw was discovered in the strxfrm() function of the Python locale\nmodule. Strings generated by this function were not properly\nNULL-terminated, which could possibly cause disclosure of data stored in\nthe memory of a Python application using this function. (CVE-2007-2052)\n\nRed Hat would like to thank David Remahl of the Apple Product Security team\nfor responsibly reporting the CVE-2008-2315 issue.\n\nAll Python users should upgrade to these updated packages, which contain\nbackported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1176",
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "235093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
},
{
"category": "external",
"summary": "295971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
},
{
"category": "external",
"summary": "442005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=442005"
},
{
"category": "external",
"summary": "443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1176.json"
}
],
"title": "Red Hat Security Advisory: python security update",
"tracking": {
"current_release_date": "2024-11-22T02:31:38+00:00",
"generator": {
"date": "2024-11-22T02:31:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2009:1176",
"initial_release_date": "2009-07-27T09:22:00+00:00",
"revision_history": [
{
"date": "2009-07-27T09:22:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-27T05:22:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T02:31:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"product": {
"name": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"product_id": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.x86_64",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.x86_64",
"product_id": "python-0:2.4.3-24.el5_3.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"product": {
"name": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"product_id": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.i386",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.i386",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.4.3-24.el5_3.6.i386",
"product": {
"name": "tkinter-0:2.4.3-24.el5_3.6.i386",
"product_id": "tkinter-0:2.4.3-24.el5_3.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.i386",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.i386",
"product_id": "python-0:2.4.3-24.el5_3.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.4.3-24.el5_3.6.i386",
"product": {
"name": "python-tools-0:2.4.3-24.el5_3.6.i386",
"product_id": "python-tools-0:2.4.3-24.el5_3.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.src",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.src",
"product_id": "python-0:2.4.3-24.el5_3.6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"product": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"product_id": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.ia64",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.ia64",
"product_id": "python-0:2.4.3-24.el5_3.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"product": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"product_id": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"product": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"product_id": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.ppc",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.ppc",
"product_id": "python-0:2.4.3-24.el5_3.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"product": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"product_id": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"product": {
"name": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"product_id": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.s390x",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.s390x",
"product_id": "python-0:2.4.3-24.el5_3.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"product": {
"name": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"product_id": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.s390",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.src"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.src"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2007-2052",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2007-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "235093"
}
],
"notes": [
{
"category": "description",
"text": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python off-by-one locale.strxfrm() (possible memory disclosure)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-2052"
},
{
"category": "external",
"summary": "RHBZ#235093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-2052",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2052"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052"
}
],
"release_date": "2007-04-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python off-by-one locale.strxfrm() (possible memory disclosure)"
},
{
"cve": "CVE-2007-4965",
"discovery_date": "2007-09-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "295971"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python imageop module heap corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=295971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-4965"
},
{
"category": "external",
"summary": "RHBZ#295971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-4965",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965"
}
],
"release_date": "2007-09-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python imageop module heap corruption"
},
{
"cve": "CVE-2008-1721",
"discovery_date": "2008-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "442005"
}
],
"notes": [
{
"category": "description",
"text": "Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: integer signedness error in the zlib extension module",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=442005\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1721"
},
{
"category": "external",
"summary": "RHBZ#442005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=442005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1721",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1721"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1721",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1721"
}
],
"release_date": "2008-04-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: integer signedness error in the zlib extension module"
},
{
"cve": "CVE-2008-1887",
"discovery_date": "2008-04-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "443810"
}
],
"notes": [
{
"category": "description",
"text": "Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: PyString_FromStringAndSize does not check for negative size values",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1887"
},
{
"category": "external",
"summary": "RHBZ#443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1887",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887"
}
],
"release_date": "2008-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: PyString_FromStringAndSize does not check for negative size values"
},
{
"acknowledgments": [
{
"names": [
"David Remahl"
],
"organization": "Apple Product Security team"
}
],
"cve": "CVE-2008-2315",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455008"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows in python core",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2315"
},
{
"category": "external",
"summary": "RHBZ#455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315"
}
],
"release_date": "2008-07-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows in python core"
},
{
"cve": "CVE-2008-3142",
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "454990"
}
],
"notes": [
{
"category": "description",
"text": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple buffer overflows in unicode processing",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3142"
},
{
"category": "external",
"summary": "RHBZ#454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142"
}
],
"release_date": "2008-04-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple buffer overflows in unicode processing"
},
{
"cve": "CVE-2008-3143",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455013"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows discovered by Google",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3143"
},
{
"category": "external",
"summary": "RHBZ#455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3143",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143"
}
],
"release_date": "2008-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows discovered by Google"
},
{
"cve": "CVE-2008-3144",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455018"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3144"
},
{
"category": "external",
"summary": "RHBZ#455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144"
}
],
"release_date": "2008-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function"
},
{
"cve": "CVE-2008-4864",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "469656"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: imageop module multiple integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-4864"
},
{
"category": "external",
"summary": "RHBZ#469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-4864",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: imageop module multiple integer overflows"
},
{
"cve": "CVE-2008-5031",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "470915"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: stringobject, unicodeobject integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-5031"
},
{
"category": "external",
"summary": "RHBZ#470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-5031",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: stringobject, unicodeobject integer overflows"
}
]
}
RHSA-2009:1176
Vulnerability from csaf_redhat - Published: 2009-07-27 09:22 - Updated: 2025-11-21 17:34Summary
Red Hat Security Advisory: python security update
Notes
Topic
Updated python packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 5.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
Python is an interpreted, interactive, object-oriented programming
language.
When the assert() system call was disabled, an input sanitization flaw was
revealed in the Python string object implementation that led to a buffer
overflow. The missing check for negative size values meant the Python
memory allocator could allocate less memory than expected. This could
result in arbitrary code execution with the Python interpreter's
privileges. (CVE-2008-1887)
Multiple buffer and integer overflow flaws were found in the Python Unicode
string processing and in the Python Unicode and string object
implementations. An attacker could use these flaws to cause a denial of
service (Python application crash). (CVE-2008-3142, CVE-2008-5031)
Multiple integer overflow flaws were found in the Python imageop module. If
a Python application used the imageop module to process untrusted images,
it could cause the application to disclose sensitive information, crash or,
potentially, execute arbitrary code with the Python interpreter's
privileges. (CVE-2007-4965, CVE-2008-4864)
Multiple integer underflow and overflow flaws were found in the Python
snprintf() wrapper implementation. An attacker could use these flaws to
cause a denial of service (memory corruption). (CVE-2008-3144)
Multiple integer overflow flaws were found in various Python modules. An
attacker could use these flaws to cause a denial of service (Python
application crash). (CVE-2008-2315, CVE-2008-3143)
An integer signedness error, leading to a buffer overflow, was found
in the Python zlib extension module. If a Python application requested
the negative byte count be flushed for a decompression stream, it could
cause the application to crash or, potentially, execute arbitrary code
with the Python interpreter's privileges. (CVE-2008-1721)
A flaw was discovered in the strxfrm() function of the Python locale
module. Strings generated by this function were not properly
NULL-terminated, which could possibly cause disclosure of data stored in
the memory of a Python application using this function. (CVE-2007-2052)
Red Hat would like to thank David Remahl of the Apple Product Security team
for responsibly reporting the CVE-2008-2315 issue.
All Python users should upgrade to these updated packages, which contain
backported patches to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated python packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming\nlanguage.\n\nWhen the assert() system call was disabled, an input sanitization flaw was\nrevealed in the Python string object implementation that led to a buffer\noverflow. The missing check for negative size values meant the Python\nmemory allocator could allocate less memory than expected. This could\nresult in arbitrary code execution with the Python interpreter\u0027s\nprivileges. (CVE-2008-1887)\n\nMultiple buffer and integer overflow flaws were found in the Python Unicode\nstring processing and in the Python Unicode and string object\nimplementations. An attacker could use these flaws to cause a denial of\nservice (Python application crash). (CVE-2008-3142, CVE-2008-5031)\n\nMultiple integer overflow flaws were found in the Python imageop module. If\na Python application used the imageop module to process untrusted images,\nit could cause the application to disclose sensitive information, crash or,\npotentially, execute arbitrary code with the Python interpreter\u0027s\nprivileges. (CVE-2007-4965, CVE-2008-4864)\n\nMultiple integer underflow and overflow flaws were found in the Python\nsnprintf() wrapper implementation. An attacker could use these flaws to\ncause a denial of service (memory corruption). (CVE-2008-3144)\n\nMultiple integer overflow flaws were found in various Python modules. An\nattacker could use these flaws to cause a denial of service (Python\napplication crash). (CVE-2008-2315, CVE-2008-3143)\n\nAn integer signedness error, leading to a buffer overflow, was found\nin the Python zlib extension module. If a Python application requested\nthe negative byte count be flushed for a decompression stream, it could\ncause the application to crash or, potentially, execute arbitrary code\nwith the Python interpreter\u0027s privileges. (CVE-2008-1721)\n\nA flaw was discovered in the strxfrm() function of the Python locale\nmodule. Strings generated by this function were not properly\nNULL-terminated, which could possibly cause disclosure of data stored in\nthe memory of a Python application using this function. (CVE-2007-2052)\n\nRed Hat would like to thank David Remahl of the Apple Product Security team\nfor responsibly reporting the CVE-2008-2315 issue.\n\nAll Python users should upgrade to these updated packages, which contain\nbackported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1176",
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "235093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
},
{
"category": "external",
"summary": "295971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
},
{
"category": "external",
"summary": "442005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=442005"
},
{
"category": "external",
"summary": "443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1176.json"
}
],
"title": "Red Hat Security Advisory: python security update",
"tracking": {
"current_release_date": "2025-11-21T17:34:54+00:00",
"generator": {
"date": "2025-11-21T17:34:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1176",
"initial_release_date": "2009-07-27T09:22:00+00:00",
"revision_history": [
{
"date": "2009-07-27T09:22:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-27T05:22:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:34:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"product": {
"name": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"product_id": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.x86_64",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.x86_64",
"product_id": "python-0:2.4.3-24.el5_3.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"product": {
"name": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"product_id": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.i386",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.i386",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.4.3-24.el5_3.6.i386",
"product": {
"name": "tkinter-0:2.4.3-24.el5_3.6.i386",
"product_id": "tkinter-0:2.4.3-24.el5_3.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.i386",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.i386",
"product_id": "python-0:2.4.3-24.el5_3.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.4.3-24.el5_3.6.i386",
"product": {
"name": "python-tools-0:2.4.3-24.el5_3.6.i386",
"product_id": "python-tools-0:2.4.3-24.el5_3.6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.src",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.src",
"product_id": "python-0:2.4.3-24.el5_3.6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"product": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"product_id": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.ia64",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.ia64",
"product_id": "python-0:2.4.3-24.el5_3.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"product": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"product_id": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"product": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"product_id": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.ppc",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.ppc",
"product_id": "python-0:2.4.3-24.el5_3.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"product": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"product_id": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"product": {
"name": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"product_id": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-0:2.4.3-24.el5_3.6.s390x",
"product": {
"name": "python-0:2.4.3-24.el5_3.6.s390x",
"product_id": "python-0:2.4.3-24.el5_3.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"product": {
"name": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"product_id": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"product": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.4.3-24.el5_3.6.s390",
"product": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390",
"product_id": "python-devel-0:2.4.3-24.el5_3.6.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.src"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.src"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.s390"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.i386"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
},
"product_reference": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2007-2052",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2007-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "235093"
}
],
"notes": [
{
"category": "description",
"text": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python off-by-one locale.strxfrm() (possible memory disclosure)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-2052"
},
{
"category": "external",
"summary": "RHBZ#235093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-2052",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2052"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052"
}
],
"release_date": "2007-04-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python off-by-one locale.strxfrm() (possible memory disclosure)"
},
{
"cve": "CVE-2007-4965",
"discovery_date": "2007-09-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "295971"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python imageop module heap corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=295971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-4965"
},
{
"category": "external",
"summary": "RHBZ#295971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-4965",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965"
}
],
"release_date": "2007-09-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python imageop module heap corruption"
},
{
"cve": "CVE-2008-1721",
"discovery_date": "2008-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "442005"
}
],
"notes": [
{
"category": "description",
"text": "Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: integer signedness error in the zlib extension module",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=442005\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1721"
},
{
"category": "external",
"summary": "RHBZ#442005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=442005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1721",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1721"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1721",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1721"
}
],
"release_date": "2008-04-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: integer signedness error in the zlib extension module"
},
{
"cve": "CVE-2008-1887",
"discovery_date": "2008-04-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "443810"
}
],
"notes": [
{
"category": "description",
"text": "Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: PyString_FromStringAndSize does not check for negative size values",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1887"
},
{
"category": "external",
"summary": "RHBZ#443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1887",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887"
}
],
"release_date": "2008-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: PyString_FromStringAndSize does not check for negative size values"
},
{
"acknowledgments": [
{
"names": [
"David Remahl"
],
"organization": "Apple Product Security team"
}
],
"cve": "CVE-2008-2315",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455008"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows in python core",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2315"
},
{
"category": "external",
"summary": "RHBZ#455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315"
}
],
"release_date": "2008-07-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows in python core"
},
{
"cve": "CVE-2008-3142",
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "454990"
}
],
"notes": [
{
"category": "description",
"text": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple buffer overflows in unicode processing",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3142"
},
{
"category": "external",
"summary": "RHBZ#454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142"
}
],
"release_date": "2008-04-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple buffer overflows in unicode processing"
},
{
"cve": "CVE-2008-3143",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455013"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows discovered by Google",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3143"
},
{
"category": "external",
"summary": "RHBZ#455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3143",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143"
}
],
"release_date": "2008-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows discovered by Google"
},
{
"cve": "CVE-2008-3144",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455018"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3144"
},
{
"category": "external",
"summary": "RHBZ#455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144"
}
],
"release_date": "2008-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function"
},
{
"cve": "CVE-2008-4864",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "469656"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: imageop module multiple integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-4864"
},
{
"category": "external",
"summary": "RHBZ#469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-4864",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: imageop module multiple integer overflows"
},
{
"cve": "CVE-2008-5031",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "470915"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: stringobject, unicodeobject integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-5031"
},
{
"category": "external",
"summary": "RHBZ#470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-5031",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:22:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
"5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-0:2.4.3-24.el5_3.6.i386",
"5Client:python-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-0:2.4.3-24.el5_3.6.src",
"5Client:python-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-0:2.4.3-24.el5_3.6.i386",
"5Server:python-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-0:2.4.3-24.el5_3.6.src",
"5Server:python-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
"5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
"5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
"5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
"5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
"5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
"5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
"5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1176"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: stringobject, unicodeobject integer overflows"
}
]
}
RHSA-2009:1177
Vulnerability from csaf_redhat - Published: 2009-07-27 09:34 - Updated: 2025-11-21 17:34Summary
Red Hat Security Advisory: python security update
Notes
Topic
Updated python packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 4.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
Python is an interpreted, interactive, object-oriented programming
language.
When the assert() system call was disabled, an input sanitization flaw was
revealed in the Python string object implementation that led to a buffer
overflow. The missing check for negative size values meant the Python
memory allocator could allocate less memory than expected. This could
result in arbitrary code execution with the Python interpreter's
privileges. (CVE-2008-1887)
Multiple buffer and integer overflow flaws were found in the Python Unicode
string processing and in the Python Unicode and string object
implementations. An attacker could use these flaws to cause a denial of
service (Python application crash). (CVE-2008-3142, CVE-2008-5031)
Multiple integer overflow flaws were found in the Python imageop module. If
a Python application used the imageop module to process untrusted images,
it could cause the application to crash or, potentially, execute arbitrary
code with the Python interpreter's privileges. (CVE-2008-1679,
CVE-2008-4864)
Multiple integer underflow and overflow flaws were found in the Python
snprintf() wrapper implementation. An attacker could use these flaws to
cause a denial of service (memory corruption). (CVE-2008-3144)
Multiple integer overflow flaws were found in various Python modules. An
attacker could use these flaws to cause a denial of service (Python
application crash). (CVE-2008-2315, CVE-2008-3143)
An integer signedness error, leading to a buffer overflow, was found
in the Python zlib extension module. If a Python application requested
the negative byte count be flushed for a decompression stream, it could
cause the application to crash or, potentially, execute arbitrary code
with the Python interpreter's privileges. (CVE-2008-1721)
Red Hat would like to thank David Remahl of the Apple Product Security team
for responsibly reporting the CVE-2008-1679 and CVE-2008-2315 issues.
All Python users should upgrade to these updated packages, which contain
backported patches to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated python packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 4.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming\nlanguage.\n\nWhen the assert() system call was disabled, an input sanitization flaw was\nrevealed in the Python string object implementation that led to a buffer\noverflow. The missing check for negative size values meant the Python\nmemory allocator could allocate less memory than expected. This could\nresult in arbitrary code execution with the Python interpreter\u0027s\nprivileges. (CVE-2008-1887)\n\nMultiple buffer and integer overflow flaws were found in the Python Unicode\nstring processing and in the Python Unicode and string object\nimplementations. An attacker could use these flaws to cause a denial of\nservice (Python application crash). (CVE-2008-3142, CVE-2008-5031)\n\nMultiple integer overflow flaws were found in the Python imageop module. If\na Python application used the imageop module to process untrusted images,\nit could cause the application to crash or, potentially, execute arbitrary\ncode with the Python interpreter\u0027s privileges. (CVE-2008-1679,\nCVE-2008-4864)\n\nMultiple integer underflow and overflow flaws were found in the Python\nsnprintf() wrapper implementation. An attacker could use these flaws to\ncause a denial of service (memory corruption). (CVE-2008-3144)\n\nMultiple integer overflow flaws were found in various Python modules. An\nattacker could use these flaws to cause a denial of service (Python\napplication crash). (CVE-2008-2315, CVE-2008-3143)\n\nAn integer signedness error, leading to a buffer overflow, was found\nin the Python zlib extension module. If a Python application requested\nthe negative byte count be flushed for a decompression stream, it could\ncause the application to crash or, potentially, execute arbitrary code\nwith the Python interpreter\u0027s privileges. (CVE-2008-1721)\n\nRed Hat would like to thank David Remahl of the Apple Product Security team\nfor responsibly reporting the CVE-2008-1679 and CVE-2008-2315 issues.\n\nAll Python users should upgrade to these updated packages, which contain\nbackported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:1177",
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "441306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=441306"
},
{
"category": "external",
"summary": "442005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=442005"
},
{
"category": "external",
"summary": "443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1177.json"
}
],
"title": "Red Hat Security Advisory: python security update",
"tracking": {
"current_release_date": "2025-11-21T17:34:55+00:00",
"generator": {
"date": "2025-11-21T17:34:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:1177",
"initial_release_date": "2009-07-27T09:34:00+00:00",
"revision_history": [
{
"date": "2009-07-27T09:34:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-07-27T05:35:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:34:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "python-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.src",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.src",
"product_id": "python-0:2.3.4-14.7.el4_8.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "python-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=i386"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "python-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "python-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "python-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python@2.3.4-14.7.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-docs@2.3.4-14.7.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-debuginfo@2.3.4-14.7.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tkinter@2.3.4-14.7.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-devel@2.3.4-14.7.el4_8.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"product": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"product_id": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-tools@2.3.4-14.7.el4_8.2?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.src"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.src"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.src"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.src"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
},
"product_reference": "tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"David Remahl"
],
"organization": "Apple Product Security team"
}
],
"cve": "CVE-2008-1679",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-04-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "441306"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: imageop module integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1679"
},
{
"category": "external",
"summary": "RHBZ#441306",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=441306"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1679",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1679"
}
],
"release_date": "2008-03-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: imageop module integer overflows"
},
{
"cve": "CVE-2008-1721",
"discovery_date": "2008-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "442005"
}
],
"notes": [
{
"category": "description",
"text": "Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: integer signedness error in the zlib extension module",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=442005\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1721"
},
{
"category": "external",
"summary": "RHBZ#442005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=442005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1721",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1721"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1721",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1721"
}
],
"release_date": "2008-04-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: integer signedness error in the zlib extension module"
},
{
"cve": "CVE-2008-1887",
"discovery_date": "2008-04-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "443810"
}
],
"notes": [
{
"category": "description",
"text": "Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: PyString_FromStringAndSize does not check for negative size values",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-1887"
},
{
"category": "external",
"summary": "RHBZ#443810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-1887",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887"
}
],
"release_date": "2008-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python: PyString_FromStringAndSize does not check for negative size values"
},
{
"acknowledgments": [
{
"names": [
"David Remahl"
],
"organization": "Apple Product Security team"
}
],
"cve": "CVE-2008-2315",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455008"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows in python core",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2315"
},
{
"category": "external",
"summary": "RHBZ#455008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2315",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315"
}
],
"release_date": "2008-07-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows in python core"
},
{
"cve": "CVE-2008-3142",
"discovery_date": "2008-07-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "454990"
}
],
"notes": [
{
"category": "description",
"text": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple buffer overflows in unicode processing",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3142"
},
{
"category": "external",
"summary": "RHBZ#454990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3142",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142"
}
],
"release_date": "2008-04-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple buffer overflows in unicode processing"
},
{
"cve": "CVE-2008-3143",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455013"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Multiple integer overflows discovered by Google",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3143"
},
{
"category": "external",
"summary": "RHBZ#455013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3143",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143"
}
],
"release_date": "2008-02-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Multiple integer overflows discovered by Google"
},
{
"cve": "CVE-2008-3144",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "455018"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3144"
},
{
"category": "external",
"summary": "RHBZ#455018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3144",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144"
}
],
"release_date": "2008-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function"
},
{
"cve": "CVE-2008-4864",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "469656"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: imageop module multiple integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-4864"
},
{
"category": "external",
"summary": "RHBZ#469656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-4864",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: imageop module multiple integer overflows"
},
{
"cve": "CVE-2008-5031",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2008-10-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "470915"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: stringobject, unicodeobject integer overflows",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-5031"
},
{
"category": "external",
"summary": "RHBZ#470915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-5031",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031"
}
],
"release_date": "2008-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-07-27T09:34:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"4AS:python-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-0:2.3.4-14.7.el4_8.2.src",
"4AS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4AS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.src",
"4Desktop:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4Desktop:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-0:2.3.4-14.7.el4_8.2.src",
"4ES:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4ES:tkinter-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-0:2.3.4-14.7.el4_8.2.src",
"4WS:python-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-debuginfo-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-devel-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-docs-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.i386",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:python-tools-0:2.3.4-14.7.el4_8.2.x86_64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.i386",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ia64",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.ppc",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.s390x",
"4WS:tkinter-0:2.3.4-14.7.el4_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:1177"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: stringobject, unicodeobject integer overflows"
}
]
}
SUSE-SU-2020:0234-1
Vulnerability from csaf_suse - Published: 2020-01-24 15:34 - Updated: 2020-01-24 15:34Summary
Security update for python
Notes
Title of the patch
Security update for python
Description of the patch
This update for python fixes the following issues:
Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
Patchnames
SUSE-2020-234,SUSE-SLE-Module-Basesystem-15-2020-234,SUSE-SLE-Module-Basesystem-15-SP1-2020-234,SUSE-SLE-Module-Desktop-Applications-15-2020-234,SUSE-SLE-Module-Desktop-Applications-15-SP1-2020-234,SUSE-SLE-Module-Development-Tools-OBS-15-2020-234,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-234,SUSE-SLE-Module-Python2-15-SP1-2020-234
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for python",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for python fixes the following issues:\n\nUpdated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2020-234,SUSE-SLE-Module-Basesystem-15-2020-234,SUSE-SLE-Module-Basesystem-15-SP1-2020-234,SUSE-SLE-Module-Desktop-Applications-15-2020-234,SUSE-SLE-Module-Desktop-Applications-15-SP1-2020-234,SUSE-SLE-Module-Development-Tools-OBS-15-2020-234,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-234,SUSE-SLE-Module-Python2-15-SP1-2020-234",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_0234-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2020:0234-1",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200234-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2020:0234-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html"
},
{
"category": "self",
"summary": "SUSE Bug 1027282",
"url": "https://bugzilla.suse.com/1027282"
},
{
"category": "self",
"summary": "SUSE Bug 1041090",
"url": "https://bugzilla.suse.com/1041090"
},
{
"category": "self",
"summary": "SUSE Bug 1042670",
"url": "https://bugzilla.suse.com/1042670"
},
{
"category": "self",
"summary": "SUSE Bug 1068664",
"url": "https://bugzilla.suse.com/1068664"
},
{
"category": "self",
"summary": "SUSE Bug 1073269",
"url": "https://bugzilla.suse.com/1073269"
},
{
"category": "self",
"summary": "SUSE Bug 1073748",
"url": "https://bugzilla.suse.com/1073748"
},
{
"category": "self",
"summary": "SUSE Bug 1078326",
"url": "https://bugzilla.suse.com/1078326"
},
{
"category": "self",
"summary": "SUSE Bug 1078485",
"url": "https://bugzilla.suse.com/1078485"
},
{
"category": "self",
"summary": "SUSE Bug 1079300",
"url": "https://bugzilla.suse.com/1079300"
},
{
"category": "self",
"summary": "SUSE Bug 1081750",
"url": "https://bugzilla.suse.com/1081750"
},
{
"category": "self",
"summary": "SUSE Bug 1083507",
"url": "https://bugzilla.suse.com/1083507"
},
{
"category": "self",
"summary": "SUSE Bug 1084650",
"url": "https://bugzilla.suse.com/1084650"
},
{
"category": "self",
"summary": "SUSE Bug 1086001",
"url": "https://bugzilla.suse.com/1086001"
},
{
"category": "self",
"summary": "SUSE Bug 1088004",
"url": "https://bugzilla.suse.com/1088004"
},
{
"category": "self",
"summary": "SUSE Bug 1088009",
"url": "https://bugzilla.suse.com/1088009"
},
{
"category": "self",
"summary": "SUSE Bug 1109847",
"url": "https://bugzilla.suse.com/1109847"
},
{
"category": "self",
"summary": "SUSE Bug 1111793",
"url": "https://bugzilla.suse.com/1111793"
},
{
"category": "self",
"summary": "SUSE Bug 1113755",
"url": "https://bugzilla.suse.com/1113755"
},
{
"category": "self",
"summary": "SUSE Bug 1122191",
"url": "https://bugzilla.suse.com/1122191"
},
{
"category": "self",
"summary": "SUSE Bug 1129346",
"url": "https://bugzilla.suse.com/1129346"
},
{
"category": "self",
"summary": "SUSE Bug 1130840",
"url": "https://bugzilla.suse.com/1130840"
},
{
"category": "self",
"summary": "SUSE Bug 1130847",
"url": "https://bugzilla.suse.com/1130847"
},
{
"category": "self",
"summary": "SUSE Bug 1138459",
"url": "https://bugzilla.suse.com/1138459"
},
{
"category": "self",
"summary": "SUSE Bug 1141853",
"url": "https://bugzilla.suse.com/1141853"
},
{
"category": "self",
"summary": "SUSE Bug 1149792",
"url": "https://bugzilla.suse.com/1149792"
},
{
"category": "self",
"summary": "SUSE Bug 1149955",
"url": "https://bugzilla.suse.com/1149955"
},
{
"category": "self",
"summary": "SUSE Bug 1153238",
"url": "https://bugzilla.suse.com/1153238"
},
{
"category": "self",
"summary": "SUSE Bug 1153830",
"url": "https://bugzilla.suse.com/1153830"
},
{
"category": "self",
"summary": "SUSE Bug 1159035",
"url": "https://bugzilla.suse.com/1159035"
},
{
"category": "self",
"summary": "SUSE Bug 214983",
"url": "https://bugzilla.suse.com/214983"
},
{
"category": "self",
"summary": "SUSE Bug 298378",
"url": "https://bugzilla.suse.com/298378"
},
{
"category": "self",
"summary": "SUSE Bug 346490",
"url": "https://bugzilla.suse.com/346490"
},
{
"category": "self",
"summary": "SUSE Bug 367853",
"url": "https://bugzilla.suse.com/367853"
},
{
"category": "self",
"summary": "SUSE Bug 379534",
"url": "https://bugzilla.suse.com/379534"
},
{
"category": "self",
"summary": "SUSE Bug 380942",
"url": "https://bugzilla.suse.com/380942"
},
{
"category": "self",
"summary": "SUSE Bug 399190",
"url": "https://bugzilla.suse.com/399190"
},
{
"category": "self",
"summary": "SUSE Bug 406051",
"url": "https://bugzilla.suse.com/406051"
},
{
"category": "self",
"summary": "SUSE Bug 425138",
"url": "https://bugzilla.suse.com/425138"
},
{
"category": "self",
"summary": "SUSE Bug 426563",
"url": "https://bugzilla.suse.com/426563"
},
{
"category": "self",
"summary": "SUSE Bug 430761",
"url": "https://bugzilla.suse.com/430761"
},
{
"category": "self",
"summary": "SUSE Bug 432677",
"url": "https://bugzilla.suse.com/432677"
},
{
"category": "self",
"summary": "SUSE Bug 436966",
"url": "https://bugzilla.suse.com/436966"
},
{
"category": "self",
"summary": "SUSE Bug 437293",
"url": "https://bugzilla.suse.com/437293"
},
{
"category": "self",
"summary": "SUSE Bug 441088",
"url": "https://bugzilla.suse.com/441088"
},
{
"category": "self",
"summary": "SUSE Bug 462375",
"url": "https://bugzilla.suse.com/462375"
},
{
"category": "self",
"summary": "SUSE Bug 525295",
"url": "https://bugzilla.suse.com/525295"
},
{
"category": "self",
"summary": "SUSE Bug 534721",
"url": "https://bugzilla.suse.com/534721"
},
{
"category": "self",
"summary": "SUSE Bug 551715",
"url": "https://bugzilla.suse.com/551715"
},
{
"category": "self",
"summary": "SUSE Bug 572673",
"url": "https://bugzilla.suse.com/572673"
},
{
"category": "self",
"summary": "SUSE Bug 577032",
"url": "https://bugzilla.suse.com/577032"
},
{
"category": "self",
"summary": "SUSE Bug 581765",
"url": "https://bugzilla.suse.com/581765"
},
{
"category": "self",
"summary": "SUSE Bug 603255",
"url": "https://bugzilla.suse.com/603255"
},
{
"category": "self",
"summary": "SUSE Bug 617751",
"url": "https://bugzilla.suse.com/617751"
},
{
"category": "self",
"summary": "SUSE Bug 637176",
"url": "https://bugzilla.suse.com/637176"
},
{
"category": "self",
"summary": "SUSE Bug 638233",
"url": "https://bugzilla.suse.com/638233"
},
{
"category": "self",
"summary": "SUSE Bug 658604",
"url": "https://bugzilla.suse.com/658604"
},
{
"category": "self",
"summary": "SUSE Bug 673071",
"url": "https://bugzilla.suse.com/673071"
},
{
"category": "self",
"summary": "SUSE Bug 682554",
"url": "https://bugzilla.suse.com/682554"
},
{
"category": "self",
"summary": "SUSE Bug 697251",
"url": "https://bugzilla.suse.com/697251"
},
{
"category": "self",
"summary": "SUSE Bug 707667",
"url": "https://bugzilla.suse.com/707667"
},
{
"category": "self",
"summary": "SUSE Bug 718009",
"url": "https://bugzilla.suse.com/718009"
},
{
"category": "self",
"summary": "SUSE Bug 747125",
"url": "https://bugzilla.suse.com/747125"
},
{
"category": "self",
"summary": "SUSE Bug 747794",
"url": "https://bugzilla.suse.com/747794"
},
{
"category": "self",
"summary": "SUSE Bug 751718",
"url": "https://bugzilla.suse.com/751718"
},
{
"category": "self",
"summary": "SUSE Bug 754447",
"url": "https://bugzilla.suse.com/754447"
},
{
"category": "self",
"summary": "SUSE Bug 766778",
"url": "https://bugzilla.suse.com/766778"
},
{
"category": "self",
"summary": "SUSE Bug 794139",
"url": "https://bugzilla.suse.com/794139"
},
{
"category": "self",
"summary": "SUSE Bug 804978",
"url": "https://bugzilla.suse.com/804978"
},
{
"category": "self",
"summary": "SUSE Bug 827982",
"url": "https://bugzilla.suse.com/827982"
},
{
"category": "self",
"summary": "SUSE Bug 831442",
"url": "https://bugzilla.suse.com/831442"
},
{
"category": "self",
"summary": "SUSE Bug 834601",
"url": "https://bugzilla.suse.com/834601"
},
{
"category": "self",
"summary": "SUSE Bug 836739",
"url": "https://bugzilla.suse.com/836739"
},
{
"category": "self",
"summary": "SUSE Bug 856835",
"url": "https://bugzilla.suse.com/856835"
},
{
"category": "self",
"summary": "SUSE Bug 856836",
"url": "https://bugzilla.suse.com/856836"
},
{
"category": "self",
"summary": "SUSE Bug 857470",
"url": "https://bugzilla.suse.com/857470"
},
{
"category": "self",
"summary": "SUSE Bug 863741",
"url": "https://bugzilla.suse.com/863741"
},
{
"category": "self",
"summary": "SUSE Bug 885882",
"url": "https://bugzilla.suse.com/885882"
},
{
"category": "self",
"summary": "SUSE Bug 898572",
"url": "https://bugzilla.suse.com/898572"
},
{
"category": "self",
"summary": "SUSE Bug 901715",
"url": "https://bugzilla.suse.com/901715"
},
{
"category": "self",
"summary": "SUSE Bug 935856",
"url": "https://bugzilla.suse.com/935856"
},
{
"category": "self",
"summary": "SUSE Bug 945401",
"url": "https://bugzilla.suse.com/945401"
},
{
"category": "self",
"summary": "SUSE Bug 964182",
"url": "https://bugzilla.suse.com/964182"
},
{
"category": "self",
"summary": "SUSE Bug 984751",
"url": "https://bugzilla.suse.com/984751"
},
{
"category": "self",
"summary": "SUSE Bug 985177",
"url": "https://bugzilla.suse.com/985177"
},
{
"category": "self",
"summary": "SUSE Bug 985348",
"url": "https://bugzilla.suse.com/985348"
},
{
"category": "self",
"summary": "SUSE Bug 989523",
"url": "https://bugzilla.suse.com/989523"
},
{
"category": "self",
"summary": "SUSE Bug 997436",
"url": "https://bugzilla.suse.com/997436"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-2052 page",
"url": "https://www.suse.com/security/cve/CVE-2007-2052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1721 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1721/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-2315 page",
"url": "https://www.suse.com/security/cve/CVE-2008-2315/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-2316 page",
"url": "https://www.suse.com/security/cve/CVE-2008-2316/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-3142 page",
"url": "https://www.suse.com/security/cve/CVE-2008-3142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-3143 page",
"url": "https://www.suse.com/security/cve/CVE-2008-3143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-3144 page",
"url": "https://www.suse.com/security/cve/CVE-2008-3144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-1521 page",
"url": "https://www.suse.com/security/cve/CVE-2011-1521/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3389 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-4944 page",
"url": "https://www.suse.com/security/cve/CVE-2011-4944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-0845 page",
"url": "https://www.suse.com/security/cve/CVE-2012-0845/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-1150 page",
"url": "https://www.suse.com/security/cve/CVE-2012-1150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1752 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1753 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4238 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4238/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1912 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-4650 page",
"url": "https://www.suse.com/security/cve/CVE-2014-4650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7185 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0772 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1000110 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1000110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5636 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5699 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5699/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1000158 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1000158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-18207 page",
"url": "https://www.suse.com/security/cve/CVE-2017-18207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000030 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000030/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000802 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1060 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1060/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1061 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14647 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14647/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20852 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-10160 page",
"url": "https://www.suse.com/security/cve/CVE-2019-10160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16056 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16935 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5010 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9636 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9947 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9948 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9948/"
}
],
"title": "Security update for python",
"tracking": {
"current_release_date": "2020-01-24T15:34:18Z",
"generator": {
"date": "2020-01-24T15:34:18Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2020:0234-1",
"initial_release_date": "2020-01-24T15:34:18Z",
"revision_history": [
{
"date": "2020-01-24T15:34:18Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"product": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"product_id": "libpython2_7-1_0-2.7.17-7.32.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-2.7.17-7.32.2.aarch64",
"product": {
"name": "python-2.7.17-7.32.2.aarch64",
"product_id": "python-2.7.17-7.32.2.aarch64"
}
},
{
"category": "product_version",
"name": "python-base-2.7.17-7.32.1.aarch64",
"product": {
"name": "python-base-2.7.17-7.32.1.aarch64",
"product_id": "python-base-2.7.17-7.32.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.17-7.32.2.aarch64",
"product": {
"name": "python-curses-2.7.17-7.32.2.aarch64",
"product_id": "python-curses-2.7.17-7.32.2.aarch64"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.17-7.32.2.aarch64",
"product": {
"name": "python-demo-2.7.17-7.32.2.aarch64",
"product_id": "python-demo-2.7.17-7.32.2.aarch64"
}
},
{
"category": "product_version",
"name": "python-devel-2.7.17-7.32.1.aarch64",
"product": {
"name": "python-devel-2.7.17-7.32.1.aarch64",
"product_id": "python-devel-2.7.17-7.32.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.17-7.32.2.aarch64",
"product": {
"name": "python-gdbm-2.7.17-7.32.2.aarch64",
"product_id": "python-gdbm-2.7.17-7.32.2.aarch64"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.17-7.32.2.aarch64",
"product": {
"name": "python-idle-2.7.17-7.32.2.aarch64",
"product_id": "python-idle-2.7.17-7.32.2.aarch64"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.17-7.32.2.aarch64",
"product": {
"name": "python-tk-2.7.17-7.32.2.aarch64",
"product_id": "python-tk-2.7.17-7.32.2.aarch64"
}
},
{
"category": "product_version",
"name": "python-xml-2.7.17-7.32.1.aarch64",
"product": {
"name": "python-xml-2.7.17-7.32.1.aarch64",
"product_id": "python-xml-2.7.17-7.32.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-64bit-2.7.17-7.32.1.aarch64_ilp32",
"product": {
"name": "libpython2_7-1_0-64bit-2.7.17-7.32.1.aarch64_ilp32",
"product_id": "libpython2_7-1_0-64bit-2.7.17-7.32.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "python-64bit-2.7.17-7.32.2.aarch64_ilp32",
"product": {
"name": "python-64bit-2.7.17-7.32.2.aarch64_ilp32",
"product_id": "python-64bit-2.7.17-7.32.2.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "python-base-64bit-2.7.17-7.32.1.aarch64_ilp32",
"product": {
"name": "python-base-64bit-2.7.17-7.32.1.aarch64_ilp32",
"product_id": "python-base-64bit-2.7.17-7.32.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-2.7.17-7.32.1.i586",
"product": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.i586",
"product_id": "libpython2_7-1_0-2.7.17-7.32.1.i586"
}
},
{
"category": "product_version",
"name": "python-2.7.17-7.32.2.i586",
"product": {
"name": "python-2.7.17-7.32.2.i586",
"product_id": "python-2.7.17-7.32.2.i586"
}
},
{
"category": "product_version",
"name": "python-base-2.7.17-7.32.1.i586",
"product": {
"name": "python-base-2.7.17-7.32.1.i586",
"product_id": "python-base-2.7.17-7.32.1.i586"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.17-7.32.2.i586",
"product": {
"name": "python-curses-2.7.17-7.32.2.i586",
"product_id": "python-curses-2.7.17-7.32.2.i586"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.17-7.32.2.i586",
"product": {
"name": "python-demo-2.7.17-7.32.2.i586",
"product_id": "python-demo-2.7.17-7.32.2.i586"
}
},
{
"category": "product_version",
"name": "python-devel-2.7.17-7.32.1.i586",
"product": {
"name": "python-devel-2.7.17-7.32.1.i586",
"product_id": "python-devel-2.7.17-7.32.1.i586"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.17-7.32.2.i586",
"product": {
"name": "python-gdbm-2.7.17-7.32.2.i586",
"product_id": "python-gdbm-2.7.17-7.32.2.i586"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.17-7.32.2.i586",
"product": {
"name": "python-idle-2.7.17-7.32.2.i586",
"product_id": "python-idle-2.7.17-7.32.2.i586"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.17-7.32.2.i586",
"product": {
"name": "python-tk-2.7.17-7.32.2.i586",
"product_id": "python-tk-2.7.17-7.32.2.i586"
}
},
{
"category": "product_version",
"name": "python-xml-2.7.17-7.32.1.i586",
"product": {
"name": "python-xml-2.7.17-7.32.1.i586",
"product_id": "python-xml-2.7.17-7.32.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "python-doc-2.7.17-7.32.2.noarch",
"product": {
"name": "python-doc-2.7.17-7.32.2.noarch",
"product_id": "python-doc-2.7.17-7.32.2.noarch"
}
},
{
"category": "product_version",
"name": "python-doc-pdf-2.7.17-7.32.2.noarch",
"product": {
"name": "python-doc-pdf-2.7.17-7.32.2.noarch",
"product_id": "python-doc-pdf-2.7.17-7.32.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"product": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"product_id": "libpython2_7-1_0-2.7.17-7.32.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-2.7.17-7.32.2.ppc64le",
"product": {
"name": "python-2.7.17-7.32.2.ppc64le",
"product_id": "python-2.7.17-7.32.2.ppc64le"
}
},
{
"category": "product_version",
"name": "python-base-2.7.17-7.32.1.ppc64le",
"product": {
"name": "python-base-2.7.17-7.32.1.ppc64le",
"product_id": "python-base-2.7.17-7.32.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.17-7.32.2.ppc64le",
"product": {
"name": "python-curses-2.7.17-7.32.2.ppc64le",
"product_id": "python-curses-2.7.17-7.32.2.ppc64le"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.17-7.32.2.ppc64le",
"product": {
"name": "python-demo-2.7.17-7.32.2.ppc64le",
"product_id": "python-demo-2.7.17-7.32.2.ppc64le"
}
},
{
"category": "product_version",
"name": "python-devel-2.7.17-7.32.1.ppc64le",
"product": {
"name": "python-devel-2.7.17-7.32.1.ppc64le",
"product_id": "python-devel-2.7.17-7.32.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.17-7.32.2.ppc64le",
"product": {
"name": "python-gdbm-2.7.17-7.32.2.ppc64le",
"product_id": "python-gdbm-2.7.17-7.32.2.ppc64le"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.17-7.32.2.ppc64le",
"product": {
"name": "python-idle-2.7.17-7.32.2.ppc64le",
"product_id": "python-idle-2.7.17-7.32.2.ppc64le"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.17-7.32.2.ppc64le",
"product": {
"name": "python-tk-2.7.17-7.32.2.ppc64le",
"product_id": "python-tk-2.7.17-7.32.2.ppc64le"
}
},
{
"category": "product_version",
"name": "python-xml-2.7.17-7.32.1.ppc64le",
"product": {
"name": "python-xml-2.7.17-7.32.1.ppc64le",
"product_id": "python-xml-2.7.17-7.32.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-2.7.17-7.32.1.s390x",
"product": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.s390x",
"product_id": "libpython2_7-1_0-2.7.17-7.32.1.s390x"
}
},
{
"category": "product_version",
"name": "python-2.7.17-7.32.2.s390x",
"product": {
"name": "python-2.7.17-7.32.2.s390x",
"product_id": "python-2.7.17-7.32.2.s390x"
}
},
{
"category": "product_version",
"name": "python-base-2.7.17-7.32.1.s390x",
"product": {
"name": "python-base-2.7.17-7.32.1.s390x",
"product_id": "python-base-2.7.17-7.32.1.s390x"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.17-7.32.2.s390x",
"product": {
"name": "python-curses-2.7.17-7.32.2.s390x",
"product_id": "python-curses-2.7.17-7.32.2.s390x"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.17-7.32.2.s390x",
"product": {
"name": "python-demo-2.7.17-7.32.2.s390x",
"product_id": "python-demo-2.7.17-7.32.2.s390x"
}
},
{
"category": "product_version",
"name": "python-devel-2.7.17-7.32.1.s390x",
"product": {
"name": "python-devel-2.7.17-7.32.1.s390x",
"product_id": "python-devel-2.7.17-7.32.1.s390x"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.17-7.32.2.s390x",
"product": {
"name": "python-gdbm-2.7.17-7.32.2.s390x",
"product_id": "python-gdbm-2.7.17-7.32.2.s390x"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.17-7.32.2.s390x",
"product": {
"name": "python-idle-2.7.17-7.32.2.s390x",
"product_id": "python-idle-2.7.17-7.32.2.s390x"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.17-7.32.2.s390x",
"product": {
"name": "python-tk-2.7.17-7.32.2.s390x",
"product_id": "python-tk-2.7.17-7.32.2.s390x"
}
},
{
"category": "product_version",
"name": "python-xml-2.7.17-7.32.1.s390x",
"product": {
"name": "python-xml-2.7.17-7.32.1.s390x",
"product_id": "python-xml-2.7.17-7.32.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"product": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"product_id": "libpython2_7-1_0-2.7.17-7.32.1.x86_64"
}
},
{
"category": "product_version",
"name": "libpython2_7-1_0-32bit-2.7.17-7.32.1.x86_64",
"product": {
"name": "libpython2_7-1_0-32bit-2.7.17-7.32.1.x86_64",
"product_id": "libpython2_7-1_0-32bit-2.7.17-7.32.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-2.7.17-7.32.2.x86_64",
"product": {
"name": "python-2.7.17-7.32.2.x86_64",
"product_id": "python-2.7.17-7.32.2.x86_64"
}
},
{
"category": "product_version",
"name": "python-32bit-2.7.17-7.32.2.x86_64",
"product": {
"name": "python-32bit-2.7.17-7.32.2.x86_64",
"product_id": "python-32bit-2.7.17-7.32.2.x86_64"
}
},
{
"category": "product_version",
"name": "python-base-2.7.17-7.32.1.x86_64",
"product": {
"name": "python-base-2.7.17-7.32.1.x86_64",
"product_id": "python-base-2.7.17-7.32.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-base-32bit-2.7.17-7.32.1.x86_64",
"product": {
"name": "python-base-32bit-2.7.17-7.32.1.x86_64",
"product_id": "python-base-32bit-2.7.17-7.32.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.17-7.32.2.x86_64",
"product": {
"name": "python-curses-2.7.17-7.32.2.x86_64",
"product_id": "python-curses-2.7.17-7.32.2.x86_64"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.17-7.32.2.x86_64",
"product": {
"name": "python-demo-2.7.17-7.32.2.x86_64",
"product_id": "python-demo-2.7.17-7.32.2.x86_64"
}
},
{
"category": "product_version",
"name": "python-devel-2.7.17-7.32.1.x86_64",
"product": {
"name": "python-devel-2.7.17-7.32.1.x86_64",
"product_id": "python-devel-2.7.17-7.32.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.17-7.32.2.x86_64",
"product": {
"name": "python-gdbm-2.7.17-7.32.2.x86_64",
"product_id": "python-gdbm-2.7.17-7.32.2.x86_64"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.17-7.32.2.x86_64",
"product": {
"name": "python-idle-2.7.17-7.32.2.x86_64",
"product_id": "python-idle-2.7.17-7.32.2.x86_64"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.17-7.32.2.x86_64",
"product": {
"name": "python-tk-2.7.17-7.32.2.x86_64",
"product_id": "python-tk-2.7.17-7.32.2.x86_64"
}
},
{
"category": "product_version",
"name": "python-xml-2.7.17-7.32.1.x86_64",
"product": {
"name": "python-xml-2.7.17-7.32.1.x86_64",
"product_id": "python-xml-2.7.17-7.32.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product": {
"name": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-desktop-applications:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Python 2 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-python2:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64"
},
"product_reference": "libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le"
},
"product_reference": "libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x"
},
"product_reference": "libpython2_7-1_0-2.7.17-7.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64"
},
"product_reference": "libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.17-7.32.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64"
},
"product_reference": "python-2.7.17-7.32.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.17-7.32.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le"
},
"product_reference": "python-2.7.17-7.32.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.17-7.32.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x"
},
"product_reference": "python-2.7.17-7.32.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.17-7.32.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64"
},
"product_reference": "python-2.7.17-7.32.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.17-7.32.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64"
},
"product_reference": "python-base-2.7.17-7.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.17-7.32.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le"
},
"product_reference": "python-base-2.7.17-7.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.17-7.32.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x"
},
"product_reference": "python-base-2.7.17-7.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.17-7.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64"
},
"product_reference": "python-base-2.7.17-7.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.17-7.32.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64"
},
"product_reference": "python-curses-2.7.17-7.32.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.17-7.32.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le"
},
"product_reference": "python-curses-2.7.17-7.32.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.17-7.32.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x"
},
"product_reference": "python-curses-2.7.17-7.32.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.17-7.32.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64"
},
"product_reference": "python-curses-2.7.17-7.32.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-2.7.17-7.32.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64"
},
"product_reference": "python-devel-2.7.17-7.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-2.7.17-7.32.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le"
},
"product_reference": "python-devel-2.7.17-7.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-2.7.17-7.32.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x"
},
"product_reference": "python-devel-2.7.17-7.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-2.7.17-7.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64"
},
"product_reference": "python-devel-2.7.17-7.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.17-7.32.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64"
},
"product_reference": "python-gdbm-2.7.17-7.32.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.17-7.32.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le"
},
"product_reference": "python-gdbm-2.7.17-7.32.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.17-7.32.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x"
},
"product_reference": "python-gdbm-2.7.17-7.32.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.17-7.32.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64"
},
"product_reference": "python-gdbm-2.7.17-7.32.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.17-7.32.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64"
},
"product_reference": "python-xml-2.7.17-7.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.17-7.32.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le"
},
"product_reference": "python-xml-2.7.17-7.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.17-7.32.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x"
},
"product_reference": "python-xml-2.7.17-7.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.17-7.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64"
},
"product_reference": "python-xml-2.7.17-7.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64"
},
"product_reference": "libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le"
},
"product_reference": "libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x"
},
"product_reference": "libpython2_7-1_0-2.7.17-7.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython2_7-1_0-2.7.17-7.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64"
},
"product_reference": "libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.17-7.32.2.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64"
},
"product_reference": "python-2.7.17-7.32.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.17-7.32.2.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le"
},
"product_reference": "python-2.7.17-7.32.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.17-7.32.2.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x"
},
"product_reference": "python-2.7.17-7.32.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.17-7.32.2.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64"
},
"product_reference": "python-2.7.17-7.32.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.17-7.32.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64"
},
"product_reference": "python-base-2.7.17-7.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.17-7.32.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le"
},
"product_reference": "python-base-2.7.17-7.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.17-7.32.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x"
},
"product_reference": "python-base-2.7.17-7.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-base-2.7.17-7.32.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64"
},
"product_reference": "python-base-2.7.17-7.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.17-7.32.2.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64"
},
"product_reference": "python-tk-2.7.17-7.32.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.17-7.32.2.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le"
},
"product_reference": "python-tk-2.7.17-7.32.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.17-7.32.2.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x"
},
"product_reference": "python-tk-2.7.17-7.32.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.17-7.32.2.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64"
},
"product_reference": "python-tk-2.7.17-7.32.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.17-7.32.2.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64"
},
"product_reference": "python-tk-2.7.17-7.32.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.17-7.32.2.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le"
},
"product_reference": "python-tk-2.7.17-7.32.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.17-7.32.2.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x"
},
"product_reference": "python-tk-2.7.17-7.32.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.17-7.32.2.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64"
},
"product_reference": "python-tk-2.7.17-7.32.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.17-7.32.2.aarch64 as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64"
},
"product_reference": "python-curses-2.7.17-7.32.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.17-7.32.2.ppc64le as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le"
},
"product_reference": "python-curses-2.7.17-7.32.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.17-7.32.2.s390x as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x"
},
"product_reference": "python-curses-2.7.17-7.32.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.17-7.32.2.x86_64 as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64"
},
"product_reference": "python-curses-2.7.17-7.32.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-2.7.17-7.32.1.aarch64 as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64"
},
"product_reference": "python-devel-2.7.17-7.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-2.7.17-7.32.1.ppc64le as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le"
},
"product_reference": "python-devel-2.7.17-7.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-2.7.17-7.32.1.s390x as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x"
},
"product_reference": "python-devel-2.7.17-7.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-devel-2.7.17-7.32.1.x86_64 as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64"
},
"product_reference": "python-devel-2.7.17-7.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.17-7.32.2.aarch64 as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64"
},
"product_reference": "python-gdbm-2.7.17-7.32.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.17-7.32.2.ppc64le as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le"
},
"product_reference": "python-gdbm-2.7.17-7.32.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.17-7.32.2.s390x as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x"
},
"product_reference": "python-gdbm-2.7.17-7.32.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.17-7.32.2.x86_64 as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64"
},
"product_reference": "python-gdbm-2.7.17-7.32.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.17-7.32.1.aarch64 as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64"
},
"product_reference": "python-xml-2.7.17-7.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.17-7.32.1.ppc64le as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le"
},
"product_reference": "python-xml-2.7.17-7.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.17-7.32.1.s390x as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x"
},
"product_reference": "python-xml-2.7.17-7.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-xml-2.7.17-7.32.1.x86_64 as component of SUSE Linux Enterprise Module for Python 2 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
},
"product_reference": "python-xml-2.7.17-7.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2007-2052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-2052"
}
],
"notes": [
{
"category": "general",
"text": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-2052",
"url": "https://www.suse.com/security/cve/CVE-2007-2052"
},
{
"category": "external",
"summary": "SUSE Bug 276889 for CVE-2007-2052",
"url": "https://bugzilla.suse.com/276889"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2007-2052"
},
{
"cve": "CVE-2008-1721",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1721"
}
],
"notes": [
{
"category": "general",
"text": "Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1721",
"url": "https://www.suse.com/security/cve/CVE-2008-1721"
},
{
"category": "external",
"summary": "SUSE Bug 379044 for CVE-2008-1721",
"url": "https://bugzilla.suse.com/379044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "important"
}
],
"title": "CVE-2008-1721"
},
{
"cve": "CVE-2008-2315",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-2315"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-2315",
"url": "https://www.suse.com/security/cve/CVE-2008-2315"
},
{
"category": "external",
"summary": "SUSE Bug 406051 for CVE-2008-2315",
"url": "https://bugzilla.suse.com/406051"
},
{
"category": "external",
"summary": "SUSE Bug 443653 for CVE-2008-2315",
"url": "https://bugzilla.suse.com/443653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "important"
}
],
"title": "CVE-2008-2315"
},
{
"cve": "CVE-2008-2316",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-2316"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to \"partial hashlib hashing of data exceeding 4GB.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-2316",
"url": "https://www.suse.com/security/cve/CVE-2008-2316"
},
{
"category": "external",
"summary": "SUSE Bug 406051 for CVE-2008-2316",
"url": "https://bugzilla.suse.com/406051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "important"
}
],
"title": "CVE-2008-2316"
},
{
"cve": "CVE-2008-3142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-3142"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-3142",
"url": "https://www.suse.com/security/cve/CVE-2008-3142"
},
{
"category": "external",
"summary": "SUSE Bug 406051 for CVE-2008-3142",
"url": "https://bugzilla.suse.com/406051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "important"
}
],
"title": "CVE-2008-3142"
},
{
"cve": "CVE-2008-3143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-3143"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-3143",
"url": "https://www.suse.com/security/cve/CVE-2008-3143"
},
{
"category": "external",
"summary": "SUSE Bug 406051 for CVE-2008-3143",
"url": "https://bugzilla.suse.com/406051"
},
{
"category": "external",
"summary": "SUSE Bug 444989 for CVE-2008-3143",
"url": "https://bugzilla.suse.com/444989"
},
{
"category": "external",
"summary": "SUSE Bug 609759 for CVE-2008-3143",
"url": "https://bugzilla.suse.com/609759"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "important"
}
],
"title": "CVE-2008-3143"
},
{
"cve": "CVE-2008-3144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-3144"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-3144",
"url": "https://www.suse.com/security/cve/CVE-2008-3144"
},
{
"category": "external",
"summary": "SUSE Bug 406051 for CVE-2008-3144",
"url": "https://bugzilla.suse.com/406051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2008-3144"
},
{
"cve": "CVE-2011-1521",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-1521"
}
],
"notes": [
{
"category": "general",
"text": "The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-1521",
"url": "https://www.suse.com/security/cve/CVE-2011-1521"
},
{
"category": "external",
"summary": "SUSE Bug 682554 for CVE-2011-1521",
"url": "https://bugzilla.suse.com/682554"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2011-1521"
},
{
"cve": "CVE-2011-3389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3389"
}
],
"notes": [
{
"category": "general",
"text": "The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3389",
"url": "https://www.suse.com/security/cve/CVE-2011-3389"
},
{
"category": "external",
"summary": "SUSE Bug 716002 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/716002"
},
{
"category": "external",
"summary": "SUSE Bug 719047 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/719047"
},
{
"category": "external",
"summary": "SUSE Bug 725167 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/725167"
},
{
"category": "external",
"summary": "SUSE Bug 726096 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/726096"
},
{
"category": "external",
"summary": "SUSE Bug 739248 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/739248"
},
{
"category": "external",
"summary": "SUSE Bug 739256 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/739256"
},
{
"category": "external",
"summary": "SUSE Bug 742306 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/742306"
},
{
"category": "external",
"summary": "SUSE Bug 751718 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/751718"
},
{
"category": "external",
"summary": "SUSE Bug 759666 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/759666"
},
{
"category": "external",
"summary": "SUSE Bug 763598 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/763598"
},
{
"category": "external",
"summary": "SUSE Bug 814655 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/814655"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "low"
}
],
"title": "CVE-2011-3389"
},
{
"cve": "CVE-2011-4944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-4944"
}
],
"notes": [
{
"category": "general",
"text": "Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-4944",
"url": "https://www.suse.com/security/cve/CVE-2011-4944"
},
{
"category": "external",
"summary": "SUSE Bug 754447 for CVE-2011-4944",
"url": "https://bugzilla.suse.com/754447"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "low"
}
],
"title": "CVE-2011-4944"
},
{
"cve": "CVE-2012-0845",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-0845"
}
],
"notes": [
{
"category": "general",
"text": "SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-0845",
"url": "https://www.suse.com/security/cve/CVE-2012-0845"
},
{
"category": "external",
"summary": "SUSE Bug 747125 for CVE-2012-0845",
"url": "https://bugzilla.suse.com/747125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2012-0845"
},
{
"cve": "CVE-2012-1150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-1150"
}
],
"notes": [
{
"category": "general",
"text": "Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-1150",
"url": "https://www.suse.com/security/cve/CVE-2012-1150"
},
{
"category": "external",
"summary": "SUSE Bug 751718 for CVE-2012-1150",
"url": "https://bugzilla.suse.com/751718"
},
{
"category": "external",
"summary": "SUSE Bug 755383 for CVE-2012-1150",
"url": "https://bugzilla.suse.com/755383"
},
{
"category": "external",
"summary": "SUSE Bug 826682 for CVE-2012-1150",
"url": "https://bugzilla.suse.com/826682"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2012-1150"
},
{
"cve": "CVE-2013-1752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1752"
}
],
"notes": [
{
"category": "general",
"text": "Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 \"Independently Fixable\" in the CVE Counting Decisions",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1752",
"url": "https://www.suse.com/security/cve/CVE-2013-1752"
},
{
"category": "external",
"summary": "SUSE Bug 856835 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/856835"
},
{
"category": "external",
"summary": "SUSE Bug 856836 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/856836"
},
{
"category": "external",
"summary": "SUSE Bug 863741 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/863741"
},
{
"category": "external",
"summary": "SUSE Bug 885882 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/885882"
},
{
"category": "external",
"summary": "SUSE Bug 898572 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/898572"
},
{
"category": "external",
"summary": "SUSE Bug 912739 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/912739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2013-1752"
},
{
"cve": "CVE-2013-1753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1753"
}
],
"notes": [
{
"category": "general",
"text": "The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1753",
"url": "https://www.suse.com/security/cve/CVE-2013-1753"
},
{
"category": "external",
"summary": "SUSE Bug 856835 for CVE-2013-1753",
"url": "https://bugzilla.suse.com/856835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2013-1753"
},
{
"cve": "CVE-2013-4238",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4238"
}
],
"notes": [
{
"category": "general",
"text": "The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a \u0027\\0\u0027 character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4238",
"url": "https://www.suse.com/security/cve/CVE-2013-4238"
},
{
"category": "external",
"summary": "SUSE Bug 834601 for CVE-2013-4238",
"url": "https://bugzilla.suse.com/834601"
},
{
"category": "external",
"summary": "SUSE Bug 839107 for CVE-2013-4238",
"url": "https://bugzilla.suse.com/839107"
},
{
"category": "external",
"summary": "SUSE Bug 882915 for CVE-2013-4238",
"url": "https://bugzilla.suse.com/882915"
},
{
"category": "external",
"summary": "SUSE Bug 912739 for CVE-2013-4238",
"url": "https://bugzilla.suse.com/912739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2013-4238"
},
{
"cve": "CVE-2014-1912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1912"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1912",
"url": "https://www.suse.com/security/cve/CVE-2014-1912"
},
{
"category": "external",
"summary": "SUSE Bug 1049392 for CVE-2014-1912",
"url": "https://bugzilla.suse.com/1049392"
},
{
"category": "external",
"summary": "SUSE Bug 1049422 for CVE-2014-1912",
"url": "https://bugzilla.suse.com/1049422"
},
{
"category": "external",
"summary": "SUSE Bug 863741 for CVE-2014-1912",
"url": "https://bugzilla.suse.com/863741"
},
{
"category": "external",
"summary": "SUSE Bug 882915 for CVE-2014-1912",
"url": "https://bugzilla.suse.com/882915"
},
{
"category": "external",
"summary": "SUSE Bug 912739 for CVE-2014-1912",
"url": "https://bugzilla.suse.com/912739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2014-1912"
},
{
"cve": "CVE-2014-4650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-4650"
}
],
"notes": [
{
"category": "general",
"text": "The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-4650",
"url": "https://www.suse.com/security/cve/CVE-2014-4650"
},
{
"category": "external",
"summary": "SUSE Bug 856835 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/856835"
},
{
"category": "external",
"summary": "SUSE Bug 856836 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/856836"
},
{
"category": "external",
"summary": "SUSE Bug 863741 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/863741"
},
{
"category": "external",
"summary": "SUSE Bug 885882 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/885882"
},
{
"category": "external",
"summary": "SUSE Bug 898572 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/898572"
},
{
"category": "external",
"summary": "SUSE Bug 912739 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/912739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2014-4650"
},
{
"cve": "CVE-2014-7185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7185"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7185",
"url": "https://www.suse.com/security/cve/CVE-2014-7185"
},
{
"category": "external",
"summary": "SUSE Bug 898572 for CVE-2014-7185",
"url": "https://bugzilla.suse.com/898572"
},
{
"category": "external",
"summary": "SUSE Bug 912739 for CVE-2014-7185",
"url": "https://bugzilla.suse.com/912739"
},
{
"category": "external",
"summary": "SUSE Bug 913479 for CVE-2014-7185",
"url": "https://bugzilla.suse.com/913479"
},
{
"category": "external",
"summary": "SUSE Bug 955182 for CVE-2014-7185",
"url": "https://bugzilla.suse.com/955182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2014-7185"
},
{
"cve": "CVE-2016-0772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0772"
}
],
"notes": [
{
"category": "general",
"text": "The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0772",
"url": "https://www.suse.com/security/cve/CVE-2016-0772"
},
{
"category": "external",
"summary": "SUSE Bug 984751 for CVE-2016-0772",
"url": "https://bugzilla.suse.com/984751"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2016-0772"
},
{
"cve": "CVE-2016-1000110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1000110"
}
],
"notes": [
{
"category": "general",
"text": "The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1000110",
"url": "https://www.suse.com/security/cve/CVE-2016-1000110"
},
{
"category": "external",
"summary": "SUSE Bug 988484 for CVE-2016-1000110",
"url": "https://bugzilla.suse.com/988484"
},
{
"category": "external",
"summary": "SUSE Bug 989523 for CVE-2016-1000110",
"url": "https://bugzilla.suse.com/989523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2016-1000110"
},
{
"cve": "CVE-2016-5636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5636"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5636",
"url": "https://www.suse.com/security/cve/CVE-2016-5636"
},
{
"category": "external",
"summary": "SUSE Bug 1065451 for CVE-2016-5636",
"url": "https://bugzilla.suse.com/1065451"
},
{
"category": "external",
"summary": "SUSE Bug 1106262 for CVE-2016-5636",
"url": "https://bugzilla.suse.com/1106262"
},
{
"category": "external",
"summary": "SUSE Bug 985177 for CVE-2016-5636",
"url": "https://bugzilla.suse.com/985177"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2016-5636"
},
{
"cve": "CVE-2016-5699",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5699"
}
],
"notes": [
{
"category": "general",
"text": "CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5699",
"url": "https://www.suse.com/security/cve/CVE-2016-5699"
},
{
"category": "external",
"summary": "SUSE Bug 1122729 for CVE-2016-5699",
"url": "https://bugzilla.suse.com/1122729"
},
{
"category": "external",
"summary": "SUSE Bug 1130840 for CVE-2016-5699",
"url": "https://bugzilla.suse.com/1130840"
},
{
"category": "external",
"summary": "SUSE Bug 985348 for CVE-2016-5699",
"url": "https://bugzilla.suse.com/985348"
},
{
"category": "external",
"summary": "SUSE Bug 985351 for CVE-2016-5699",
"url": "https://bugzilla.suse.com/985351"
},
{
"category": "external",
"summary": "SUSE Bug 986630 for CVE-2016-5699",
"url": "https://bugzilla.suse.com/986630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2016-5699"
},
{
"cve": "CVE-2017-1000158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1000158"
}
],
"notes": [
{
"category": "general",
"text": "CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1000158",
"url": "https://www.suse.com/security/cve/CVE-2017-1000158"
},
{
"category": "external",
"summary": "SUSE Bug 1068664 for CVE-2017-1000158",
"url": "https://bugzilla.suse.com/1068664"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "important"
}
],
"title": "CVE-2017-1000158"
},
{
"cve": "CVE-2017-18207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-18207"
}
],
"notes": [
{
"category": "general",
"text": "The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications \"need to be prepared to handle a wide variety of exceptions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-18207",
"url": "https://www.suse.com/security/cve/CVE-2017-18207"
},
{
"category": "external",
"summary": "SUSE Bug 1083507 for CVE-2017-18207",
"url": "https://bugzilla.suse.com/1083507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2017-18207"
},
{
"cve": "CVE-2018-1000030",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000030"
}
],
"notes": [
{
"category": "general",
"text": "Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed. The vulnerability lies when multiply threads are handling large amounts of data. In both cases there is essentially a race condition that occurs. For the Heap-Buffer-Overflow, Thread 2 is creating the size for a buffer, but Thread1 is already writing to the buffer without knowing how much to write. So when a large amount of data is being processed, it is very easy to cause memory corruption using a Heap-Buffer-Overflow. As for the Use-After-Free, Thread3-\u003eMalloc-\u003eThread1-\u003eFree\u0027s-\u003eThread2-Re-uses-Free\u0027d Memory. The PSRT has stated that this is not a security vulnerability due to the fact that the attacker must be able to run code, however in some situations, such as function as a service, this vulnerability can potentially be used by an attacker to violate a trust boundary, as such the DWF feels this issue deserves a CVE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000030",
"url": "https://www.suse.com/security/cve/CVE-2018-1000030"
},
{
"category": "external",
"summary": "SUSE Bug 1079300 for CVE-2018-1000030",
"url": "https://bugzilla.suse.com/1079300"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "important"
}
],
"title": "CVE-2018-1000030"
},
{
"cve": "CVE-2018-1000802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000802"
}
],
"notes": [
{
"category": "general",
"text": "Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027) vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000802",
"url": "https://www.suse.com/security/cve/CVE-2018-1000802"
},
{
"category": "external",
"summary": "SUSE Bug 1109663 for CVE-2018-1000802",
"url": "https://bugzilla.suse.com/1109663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000802"
},
{
"cve": "CVE-2018-1060",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1060"
}
],
"notes": [
{
"category": "general",
"text": "python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib\u0027s apop() method. An attacker could use this flaw to cause denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1060",
"url": "https://www.suse.com/security/cve/CVE-2018-1060"
},
{
"category": "external",
"summary": "SUSE Bug 1088009 for CVE-2018-1060",
"url": "https://bugzilla.suse.com/1088009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "low"
}
],
"title": "CVE-2018-1060"
},
{
"cve": "CVE-2018-1061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1061"
}
],
"notes": [
{
"category": "general",
"text": "python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1061",
"url": "https://www.suse.com/security/cve/CVE-2018-1061"
},
{
"category": "external",
"summary": "SUSE Bug 1088004 for CVE-2018-1061",
"url": "https://bugzilla.suse.com/1088004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "low"
}
],
"title": "CVE-2018-1061"
},
{
"cve": "CVE-2018-14647",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14647"
}
],
"notes": [
{
"category": "general",
"text": "Python\u0027s elementtree C accelerator failed to initialise Expat\u0027s hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat\u0027s internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14647",
"url": "https://www.suse.com/security/cve/CVE-2018-14647"
},
{
"category": "external",
"summary": "SUSE Bug 1109847 for CVE-2018-14647",
"url": "https://bugzilla.suse.com/1109847"
},
{
"category": "external",
"summary": "SUSE Bug 1126909 for CVE-2018-14647",
"url": "https://bugzilla.suse.com/1126909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2018-14647"
},
{
"cve": "CVE-2018-20852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20852"
}
],
"notes": [
{
"category": "general",
"text": "http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20852",
"url": "https://www.suse.com/security/cve/CVE-2018-20852"
},
{
"category": "external",
"summary": "SUSE Bug 1141853 for CVE-2018-20852",
"url": "https://bugzilla.suse.com/1141853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2018-20852"
},
{
"cve": "CVE-2019-10160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-10160"
}
],
"notes": [
{
"category": "general",
"text": "A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-10160",
"url": "https://www.suse.com/security/cve/CVE-2019-10160"
},
{
"category": "external",
"summary": "SUSE Bug 1138459 for CVE-2019-10160",
"url": "https://bugzilla.suse.com/1138459"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "important"
}
],
"title": "CVE-2019-10160"
},
{
"cve": "CVE-2019-16056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16056"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16056",
"url": "https://www.suse.com/security/cve/CVE-2019-16056"
},
{
"category": "external",
"summary": "SUSE Bug 1149955 for CVE-2019-16056",
"url": "https://bugzilla.suse.com/1149955"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2019-16056"
},
{
"cve": "CVE-2019-16935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16935"
}
],
"notes": [
{
"category": "general",
"text": "The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16935",
"url": "https://www.suse.com/security/cve/CVE-2019-16935"
},
{
"category": "external",
"summary": "SUSE Bug 1153238 for CVE-2019-16935",
"url": "https://bugzilla.suse.com/1153238"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2019-16935"
},
{
"cve": "CVE-2019-5010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5010"
}
],
"notes": [
{
"category": "general",
"text": "An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5010",
"url": "https://www.suse.com/security/cve/CVE-2019-5010"
},
{
"category": "external",
"summary": "SUSE Bug 1122191 for CVE-2019-5010",
"url": "https://bugzilla.suse.com/1122191"
},
{
"category": "external",
"summary": "SUSE Bug 1126909 for CVE-2019-5010",
"url": "https://bugzilla.suse.com/1126909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2019-5010"
},
{
"cve": "CVE-2019-9636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9636"
}
],
"notes": [
{
"category": "general",
"text": "Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9636",
"url": "https://www.suse.com/security/cve/CVE-2019-9636"
},
{
"category": "external",
"summary": "SUSE Bug 1129346 for CVE-2019-9636",
"url": "https://bugzilla.suse.com/1129346"
},
{
"category": "external",
"summary": "SUSE Bug 1135433 for CVE-2019-9636",
"url": "https://bugzilla.suse.com/1135433"
},
{
"category": "external",
"summary": "SUSE Bug 1138459 for CVE-2019-9636",
"url": "https://bugzilla.suse.com/1138459"
},
{
"category": "external",
"summary": "SUSE Bug 1145004 for CVE-2019-9636",
"url": "https://bugzilla.suse.com/1145004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2019-9636"
},
{
"cve": "CVE-2019-9947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9947"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9947",
"url": "https://www.suse.com/security/cve/CVE-2019-9947"
},
{
"category": "external",
"summary": "SUSE Bug 1130840 for CVE-2019-9947",
"url": "https://bugzilla.suse.com/1130840"
},
{
"category": "external",
"summary": "SUSE Bug 1136184 for CVE-2019-9947",
"url": "https://bugzilla.suse.com/1136184"
},
{
"category": "external",
"summary": "SUSE Bug 1155094 for CVE-2019-9947",
"url": "https://bugzilla.suse.com/1155094"
},
{
"category": "external",
"summary": "SUSE Bug 1201559 for CVE-2019-9947",
"url": "https://bugzilla.suse.com/1201559"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "moderate"
}
],
"title": "CVE-2019-9947"
},
{
"cve": "CVE-2019-9948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9948"
}
],
"notes": [
{
"category": "general",
"text": "urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen(\u0027local_file:///etc/passwd\u0027) call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9948",
"url": "https://www.suse.com/security/cve/CVE-2019-9948"
},
{
"category": "external",
"summary": "SUSE Bug 1130847 for CVE-2019-9948",
"url": "https://bugzilla.suse.com/1130847"
},
{
"category": "external",
"summary": "SUSE Bug 1135433 for CVE-2019-9948",
"url": "https://bugzilla.suse.com/1135433"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libpython2_7-1_0-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-base-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:python-xml-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP1:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Desktop Applications 15:python-tk-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-curses-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-devel-2.7.17-7.32.1.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-gdbm-2.7.17-7.32.2.x86_64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.aarch64",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.ppc64le",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.s390x",
"SUSE Linux Enterprise Module for Python 2 15 SP1:python-xml-2.7.17-7.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-01-24T15:34:18Z",
"details": "low"
}
],
"title": "CVE-2019-9948"
}
]
}
OPENSUSE-SU-2024:11202-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
python-2.7.18-8.1 on GA media
Notes
Title of the patch
python-2.7.18-8.1 on GA media
Description of the patch
These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11202
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "python-2.7.18-8.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11202",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11202-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2007-2052 page",
"url": "https://www.suse.com/security/cve/CVE-2007-2052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1721 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1721/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-2315 page",
"url": "https://www.suse.com/security/cve/CVE-2008-2315/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-2316 page",
"url": "https://www.suse.com/security/cve/CVE-2008-2316/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-3142 page",
"url": "https://www.suse.com/security/cve/CVE-2008-3142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-3143 page",
"url": "https://www.suse.com/security/cve/CVE-2008-3143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-3144 page",
"url": "https://www.suse.com/security/cve/CVE-2008-3144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-1521 page",
"url": "https://www.suse.com/security/cve/CVE-2011-1521/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3389 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-4944 page",
"url": "https://www.suse.com/security/cve/CVE-2011-4944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-0845 page",
"url": "https://www.suse.com/security/cve/CVE-2012-0845/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-1150 page",
"url": "https://www.suse.com/security/cve/CVE-2012-1150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1752 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1753 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1912 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-4650 page",
"url": "https://www.suse.com/security/cve/CVE-2014-4650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7185 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1000110 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1000110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1000158 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1000158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-18207 page",
"url": "https://www.suse.com/security/cve/CVE-2017-18207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000030 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000030/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000802 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1060 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1060/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1061 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14647 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14647/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20852 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-10160 page",
"url": "https://www.suse.com/security/cve/CVE-2019-10160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16056 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16935 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-18348 page",
"url": "https://www.suse.com/security/cve/CVE-2019-18348/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5010 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9636 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9674 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9674/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9947 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9948 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8492 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8492/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23336 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23336/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3177 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3733 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3733/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3737 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3737/"
}
],
"title": "python-2.7.18-8.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11202-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python-2.7.18-8.1.aarch64",
"product": {
"name": "python-2.7.18-8.1.aarch64",
"product_id": "python-2.7.18-8.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-32bit-2.7.18-8.1.aarch64",
"product": {
"name": "python-32bit-2.7.18-8.1.aarch64",
"product_id": "python-32bit-2.7.18-8.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.18-8.1.aarch64",
"product": {
"name": "python-curses-2.7.18-8.1.aarch64",
"product_id": "python-curses-2.7.18-8.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.18-8.1.aarch64",
"product": {
"name": "python-demo-2.7.18-8.1.aarch64",
"product_id": "python-demo-2.7.18-8.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.18-8.1.aarch64",
"product": {
"name": "python-gdbm-2.7.18-8.1.aarch64",
"product_id": "python-gdbm-2.7.18-8.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.18-8.1.aarch64",
"product": {
"name": "python-idle-2.7.18-8.1.aarch64",
"product_id": "python-idle-2.7.18-8.1.aarch64"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.18-8.1.aarch64",
"product": {
"name": "python-tk-2.7.18-8.1.aarch64",
"product_id": "python-tk-2.7.18-8.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-2.7.18-8.1.ppc64le",
"product": {
"name": "python-2.7.18-8.1.ppc64le",
"product_id": "python-2.7.18-8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-32bit-2.7.18-8.1.ppc64le",
"product": {
"name": "python-32bit-2.7.18-8.1.ppc64le",
"product_id": "python-32bit-2.7.18-8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.18-8.1.ppc64le",
"product": {
"name": "python-curses-2.7.18-8.1.ppc64le",
"product_id": "python-curses-2.7.18-8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.18-8.1.ppc64le",
"product": {
"name": "python-demo-2.7.18-8.1.ppc64le",
"product_id": "python-demo-2.7.18-8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.18-8.1.ppc64le",
"product": {
"name": "python-gdbm-2.7.18-8.1.ppc64le",
"product_id": "python-gdbm-2.7.18-8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.18-8.1.ppc64le",
"product": {
"name": "python-idle-2.7.18-8.1.ppc64le",
"product_id": "python-idle-2.7.18-8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.18-8.1.ppc64le",
"product": {
"name": "python-tk-2.7.18-8.1.ppc64le",
"product_id": "python-tk-2.7.18-8.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python-2.7.18-8.1.s390x",
"product": {
"name": "python-2.7.18-8.1.s390x",
"product_id": "python-2.7.18-8.1.s390x"
}
},
{
"category": "product_version",
"name": "python-32bit-2.7.18-8.1.s390x",
"product": {
"name": "python-32bit-2.7.18-8.1.s390x",
"product_id": "python-32bit-2.7.18-8.1.s390x"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.18-8.1.s390x",
"product": {
"name": "python-curses-2.7.18-8.1.s390x",
"product_id": "python-curses-2.7.18-8.1.s390x"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.18-8.1.s390x",
"product": {
"name": "python-demo-2.7.18-8.1.s390x",
"product_id": "python-demo-2.7.18-8.1.s390x"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.18-8.1.s390x",
"product": {
"name": "python-gdbm-2.7.18-8.1.s390x",
"product_id": "python-gdbm-2.7.18-8.1.s390x"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.18-8.1.s390x",
"product": {
"name": "python-idle-2.7.18-8.1.s390x",
"product_id": "python-idle-2.7.18-8.1.s390x"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.18-8.1.s390x",
"product": {
"name": "python-tk-2.7.18-8.1.s390x",
"product_id": "python-tk-2.7.18-8.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python-2.7.18-8.1.x86_64",
"product": {
"name": "python-2.7.18-8.1.x86_64",
"product_id": "python-2.7.18-8.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-32bit-2.7.18-8.1.x86_64",
"product": {
"name": "python-32bit-2.7.18-8.1.x86_64",
"product_id": "python-32bit-2.7.18-8.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-curses-2.7.18-8.1.x86_64",
"product": {
"name": "python-curses-2.7.18-8.1.x86_64",
"product_id": "python-curses-2.7.18-8.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-demo-2.7.18-8.1.x86_64",
"product": {
"name": "python-demo-2.7.18-8.1.x86_64",
"product_id": "python-demo-2.7.18-8.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-gdbm-2.7.18-8.1.x86_64",
"product": {
"name": "python-gdbm-2.7.18-8.1.x86_64",
"product_id": "python-gdbm-2.7.18-8.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-idle-2.7.18-8.1.x86_64",
"product": {
"name": "python-idle-2.7.18-8.1.x86_64",
"product_id": "python-idle-2.7.18-8.1.x86_64"
}
},
{
"category": "product_version",
"name": "python-tk-2.7.18-8.1.x86_64",
"product": {
"name": "python-tk-2.7.18-8.1.x86_64",
"product_id": "python-tk-2.7.18-8.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.18-8.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-2.7.18-8.1.aarch64"
},
"product_reference": "python-2.7.18-8.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.18-8.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le"
},
"product_reference": "python-2.7.18-8.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.18-8.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-2.7.18-8.1.s390x"
},
"product_reference": "python-2.7.18-8.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-2.7.18-8.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-2.7.18-8.1.x86_64"
},
"product_reference": "python-2.7.18-8.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-32bit-2.7.18-8.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64"
},
"product_reference": "python-32bit-2.7.18-8.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-32bit-2.7.18-8.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le"
},
"product_reference": "python-32bit-2.7.18-8.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-32bit-2.7.18-8.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x"
},
"product_reference": "python-32bit-2.7.18-8.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-32bit-2.7.18-8.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64"
},
"product_reference": "python-32bit-2.7.18-8.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.18-8.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64"
},
"product_reference": "python-curses-2.7.18-8.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.18-8.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le"
},
"product_reference": "python-curses-2.7.18-8.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.18-8.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x"
},
"product_reference": "python-curses-2.7.18-8.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-curses-2.7.18-8.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64"
},
"product_reference": "python-curses-2.7.18-8.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-demo-2.7.18-8.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64"
},
"product_reference": "python-demo-2.7.18-8.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-demo-2.7.18-8.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le"
},
"product_reference": "python-demo-2.7.18-8.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-demo-2.7.18-8.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x"
},
"product_reference": "python-demo-2.7.18-8.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-demo-2.7.18-8.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64"
},
"product_reference": "python-demo-2.7.18-8.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.18-8.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64"
},
"product_reference": "python-gdbm-2.7.18-8.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.18-8.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le"
},
"product_reference": "python-gdbm-2.7.18-8.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.18-8.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x"
},
"product_reference": "python-gdbm-2.7.18-8.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gdbm-2.7.18-8.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64"
},
"product_reference": "python-gdbm-2.7.18-8.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-idle-2.7.18-8.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64"
},
"product_reference": "python-idle-2.7.18-8.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-idle-2.7.18-8.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le"
},
"product_reference": "python-idle-2.7.18-8.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-idle-2.7.18-8.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x"
},
"product_reference": "python-idle-2.7.18-8.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-idle-2.7.18-8.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64"
},
"product_reference": "python-idle-2.7.18-8.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.18-8.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64"
},
"product_reference": "python-tk-2.7.18-8.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.18-8.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le"
},
"product_reference": "python-tk-2.7.18-8.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.18-8.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x"
},
"product_reference": "python-tk-2.7.18-8.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-tk-2.7.18-8.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
},
"product_reference": "python-tk-2.7.18-8.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2007-2052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2007-2052"
}
],
"notes": [
{
"category": "general",
"text": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2007-2052",
"url": "https://www.suse.com/security/cve/CVE-2007-2052"
},
{
"category": "external",
"summary": "SUSE Bug 276889 for CVE-2007-2052",
"url": "https://bugzilla.suse.com/276889"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2007-2052"
},
{
"cve": "CVE-2008-1721",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1721"
}
],
"notes": [
{
"category": "general",
"text": "Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1721",
"url": "https://www.suse.com/security/cve/CVE-2008-1721"
},
{
"category": "external",
"summary": "SUSE Bug 379044 for CVE-2008-1721",
"url": "https://bugzilla.suse.com/379044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-1721"
},
{
"cve": "CVE-2008-2315",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-2315"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-2315",
"url": "https://www.suse.com/security/cve/CVE-2008-2315"
},
{
"category": "external",
"summary": "SUSE Bug 406051 for CVE-2008-2315",
"url": "https://bugzilla.suse.com/406051"
},
{
"category": "external",
"summary": "SUSE Bug 443653 for CVE-2008-2315",
"url": "https://bugzilla.suse.com/443653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-2315"
},
{
"cve": "CVE-2008-2316",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-2316"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to \"partial hashlib hashing of data exceeding 4GB.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-2316",
"url": "https://www.suse.com/security/cve/CVE-2008-2316"
},
{
"category": "external",
"summary": "SUSE Bug 406051 for CVE-2008-2316",
"url": "https://bugzilla.suse.com/406051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-2316"
},
{
"cve": "CVE-2008-3142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-3142"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-3142",
"url": "https://www.suse.com/security/cve/CVE-2008-3142"
},
{
"category": "external",
"summary": "SUSE Bug 406051 for CVE-2008-3142",
"url": "https://bugzilla.suse.com/406051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-3142"
},
{
"cve": "CVE-2008-3143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-3143"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-3143",
"url": "https://www.suse.com/security/cve/CVE-2008-3143"
},
{
"category": "external",
"summary": "SUSE Bug 406051 for CVE-2008-3143",
"url": "https://bugzilla.suse.com/406051"
},
{
"category": "external",
"summary": "SUSE Bug 444989 for CVE-2008-3143",
"url": "https://bugzilla.suse.com/444989"
},
{
"category": "external",
"summary": "SUSE Bug 609759 for CVE-2008-3143",
"url": "https://bugzilla.suse.com/609759"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-3143"
},
{
"cve": "CVE-2008-3144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-3144"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-3144",
"url": "https://www.suse.com/security/cve/CVE-2008-3144"
},
{
"category": "external",
"summary": "SUSE Bug 406051 for CVE-2008-3144",
"url": "https://bugzilla.suse.com/406051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-3144"
},
{
"cve": "CVE-2011-1521",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-1521"
}
],
"notes": [
{
"category": "general",
"text": "The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-1521",
"url": "https://www.suse.com/security/cve/CVE-2011-1521"
},
{
"category": "external",
"summary": "SUSE Bug 682554 for CVE-2011-1521",
"url": "https://bugzilla.suse.com/682554"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-1521"
},
{
"cve": "CVE-2011-3389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3389"
}
],
"notes": [
{
"category": "general",
"text": "The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3389",
"url": "https://www.suse.com/security/cve/CVE-2011-3389"
},
{
"category": "external",
"summary": "SUSE Bug 716002 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/716002"
},
{
"category": "external",
"summary": "SUSE Bug 719047 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/719047"
},
{
"category": "external",
"summary": "SUSE Bug 725167 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/725167"
},
{
"category": "external",
"summary": "SUSE Bug 726096 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/726096"
},
{
"category": "external",
"summary": "SUSE Bug 739248 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/739248"
},
{
"category": "external",
"summary": "SUSE Bug 739256 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/739256"
},
{
"category": "external",
"summary": "SUSE Bug 742306 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/742306"
},
{
"category": "external",
"summary": "SUSE Bug 751718 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/751718"
},
{
"category": "external",
"summary": "SUSE Bug 759666 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/759666"
},
{
"category": "external",
"summary": "SUSE Bug 763598 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/763598"
},
{
"category": "external",
"summary": "SUSE Bug 814655 for CVE-2011-3389",
"url": "https://bugzilla.suse.com/814655"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3389"
},
{
"cve": "CVE-2011-4944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-4944"
}
],
"notes": [
{
"category": "general",
"text": "Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-4944",
"url": "https://www.suse.com/security/cve/CVE-2011-4944"
},
{
"category": "external",
"summary": "SUSE Bug 754447 for CVE-2011-4944",
"url": "https://bugzilla.suse.com/754447"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2011-4944"
},
{
"cve": "CVE-2012-0845",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-0845"
}
],
"notes": [
{
"category": "general",
"text": "SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-0845",
"url": "https://www.suse.com/security/cve/CVE-2012-0845"
},
{
"category": "external",
"summary": "SUSE Bug 747125 for CVE-2012-0845",
"url": "https://bugzilla.suse.com/747125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-0845"
},
{
"cve": "CVE-2012-1150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-1150"
}
],
"notes": [
{
"category": "general",
"text": "Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-1150",
"url": "https://www.suse.com/security/cve/CVE-2012-1150"
},
{
"category": "external",
"summary": "SUSE Bug 751718 for CVE-2012-1150",
"url": "https://bugzilla.suse.com/751718"
},
{
"category": "external",
"summary": "SUSE Bug 755383 for CVE-2012-1150",
"url": "https://bugzilla.suse.com/755383"
},
{
"category": "external",
"summary": "SUSE Bug 826682 for CVE-2012-1150",
"url": "https://bugzilla.suse.com/826682"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-1150"
},
{
"cve": "CVE-2013-1752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1752"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 \"Independently Fixable\" in the CVE Counting Decisions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1752",
"url": "https://www.suse.com/security/cve/CVE-2013-1752"
},
{
"category": "external",
"summary": "SUSE Bug 856835 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/856835"
},
{
"category": "external",
"summary": "SUSE Bug 856836 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/856836"
},
{
"category": "external",
"summary": "SUSE Bug 863741 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/863741"
},
{
"category": "external",
"summary": "SUSE Bug 885882 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/885882"
},
{
"category": "external",
"summary": "SUSE Bug 898572 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/898572"
},
{
"category": "external",
"summary": "SUSE Bug 912739 for CVE-2013-1752",
"url": "https://bugzilla.suse.com/912739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-1752"
},
{
"cve": "CVE-2013-1753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1753"
}
],
"notes": [
{
"category": "general",
"text": "The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1753",
"url": "https://www.suse.com/security/cve/CVE-2013-1753"
},
{
"category": "external",
"summary": "SUSE Bug 856835 for CVE-2013-1753",
"url": "https://bugzilla.suse.com/856835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-1753"
},
{
"cve": "CVE-2014-1912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1912"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1912",
"url": "https://www.suse.com/security/cve/CVE-2014-1912"
},
{
"category": "external",
"summary": "SUSE Bug 1049392 for CVE-2014-1912",
"url": "https://bugzilla.suse.com/1049392"
},
{
"category": "external",
"summary": "SUSE Bug 1049422 for CVE-2014-1912",
"url": "https://bugzilla.suse.com/1049422"
},
{
"category": "external",
"summary": "SUSE Bug 863741 for CVE-2014-1912",
"url": "https://bugzilla.suse.com/863741"
},
{
"category": "external",
"summary": "SUSE Bug 882915 for CVE-2014-1912",
"url": "https://bugzilla.suse.com/882915"
},
{
"category": "external",
"summary": "SUSE Bug 912739 for CVE-2014-1912",
"url": "https://bugzilla.suse.com/912739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-1912"
},
{
"cve": "CVE-2014-4650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-4650"
}
],
"notes": [
{
"category": "general",
"text": "The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-4650",
"url": "https://www.suse.com/security/cve/CVE-2014-4650"
},
{
"category": "external",
"summary": "SUSE Bug 856835 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/856835"
},
{
"category": "external",
"summary": "SUSE Bug 856836 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/856836"
},
{
"category": "external",
"summary": "SUSE Bug 863741 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/863741"
},
{
"category": "external",
"summary": "SUSE Bug 885882 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/885882"
},
{
"category": "external",
"summary": "SUSE Bug 898572 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/898572"
},
{
"category": "external",
"summary": "SUSE Bug 912739 for CVE-2014-4650",
"url": "https://bugzilla.suse.com/912739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-4650"
},
{
"cve": "CVE-2014-7185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7185"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7185",
"url": "https://www.suse.com/security/cve/CVE-2014-7185"
},
{
"category": "external",
"summary": "SUSE Bug 898572 for CVE-2014-7185",
"url": "https://bugzilla.suse.com/898572"
},
{
"category": "external",
"summary": "SUSE Bug 912739 for CVE-2014-7185",
"url": "https://bugzilla.suse.com/912739"
},
{
"category": "external",
"summary": "SUSE Bug 913479 for CVE-2014-7185",
"url": "https://bugzilla.suse.com/913479"
},
{
"category": "external",
"summary": "SUSE Bug 955182 for CVE-2014-7185",
"url": "https://bugzilla.suse.com/955182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-7185"
},
{
"cve": "CVE-2016-1000110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1000110"
}
],
"notes": [
{
"category": "general",
"text": "The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1000110",
"url": "https://www.suse.com/security/cve/CVE-2016-1000110"
},
{
"category": "external",
"summary": "SUSE Bug 988484 for CVE-2016-1000110",
"url": "https://bugzilla.suse.com/988484"
},
{
"category": "external",
"summary": "SUSE Bug 989523 for CVE-2016-1000110",
"url": "https://bugzilla.suse.com/989523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1000110"
},
{
"cve": "CVE-2017-1000158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1000158"
}
],
"notes": [
{
"category": "general",
"text": "CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1000158",
"url": "https://www.suse.com/security/cve/CVE-2017-1000158"
},
{
"category": "external",
"summary": "SUSE Bug 1068664 for CVE-2017-1000158",
"url": "https://bugzilla.suse.com/1068664"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2017-1000158"
},
{
"cve": "CVE-2017-18207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-18207"
}
],
"notes": [
{
"category": "general",
"text": "** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications \"need to be prepared to handle a wide variety of exceptions.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-18207",
"url": "https://www.suse.com/security/cve/CVE-2017-18207"
},
{
"category": "external",
"summary": "SUSE Bug 1083507 for CVE-2017-18207",
"url": "https://bugzilla.suse.com/1083507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-18207"
},
{
"cve": "CVE-2018-1000030",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000030"
}
],
"notes": [
{
"category": "general",
"text": "Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed. The vulnerability lies when multiply threads are handling large amounts of data. In both cases there is essentially a race condition that occurs. For the Heap-Buffer-Overflow, Thread 2 is creating the size for a buffer, but Thread1 is already writing to the buffer without knowing how much to write. So when a large amount of data is being processed, it is very easy to cause memory corruption using a Heap-Buffer-Overflow. As for the Use-After-Free, Thread3-\u003eMalloc-\u003eThread1-\u003eFree\u0027s-\u003eThread2-Re-uses-Free\u0027d Memory. The PSRT has stated that this is not a security vulnerability due to the fact that the attacker must be able to run code, however in some situations, such as function as a service, this vulnerability can potentially be used by an attacker to violate a trust boundary, as such the DWF feels this issue deserves a CVE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000030",
"url": "https://www.suse.com/security/cve/CVE-2018-1000030"
},
{
"category": "external",
"summary": "SUSE Bug 1079300 for CVE-2018-1000030",
"url": "https://bugzilla.suse.com/1079300"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-1000030"
},
{
"cve": "CVE-2018-1000802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000802"
}
],
"notes": [
{
"category": "general",
"text": "Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027) vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000802",
"url": "https://www.suse.com/security/cve/CVE-2018-1000802"
},
{
"category": "external",
"summary": "SUSE Bug 1109663 for CVE-2018-1000802",
"url": "https://bugzilla.suse.com/1109663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000802"
},
{
"cve": "CVE-2018-1060",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1060"
}
],
"notes": [
{
"category": "general",
"text": "python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib\u0027s apop() method. An attacker could use this flaw to cause denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1060",
"url": "https://www.suse.com/security/cve/CVE-2018-1060"
},
{
"category": "external",
"summary": "SUSE Bug 1088009 for CVE-2018-1060",
"url": "https://bugzilla.suse.com/1088009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-1060"
},
{
"cve": "CVE-2018-1061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1061"
}
],
"notes": [
{
"category": "general",
"text": "python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1061",
"url": "https://www.suse.com/security/cve/CVE-2018-1061"
},
{
"category": "external",
"summary": "SUSE Bug 1088004 for CVE-2018-1061",
"url": "https://bugzilla.suse.com/1088004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1061"
},
{
"cve": "CVE-2018-14647",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14647"
}
],
"notes": [
{
"category": "general",
"text": "Python\u0027s elementtree C accelerator failed to initialise Expat\u0027s hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat\u0027s internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14647",
"url": "https://www.suse.com/security/cve/CVE-2018-14647"
},
{
"category": "external",
"summary": "SUSE Bug 1109847 for CVE-2018-14647",
"url": "https://bugzilla.suse.com/1109847"
},
{
"category": "external",
"summary": "SUSE Bug 1126909 for CVE-2018-14647",
"url": "https://bugzilla.suse.com/1126909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-14647"
},
{
"cve": "CVE-2018-20852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20852"
}
],
"notes": [
{
"category": "general",
"text": "http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20852",
"url": "https://www.suse.com/security/cve/CVE-2018-20852"
},
{
"category": "external",
"summary": "SUSE Bug 1141853 for CVE-2018-20852",
"url": "https://bugzilla.suse.com/1141853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-20852"
},
{
"cve": "CVE-2019-10160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-10160"
}
],
"notes": [
{
"category": "general",
"text": "A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-10160",
"url": "https://www.suse.com/security/cve/CVE-2019-10160"
},
{
"category": "external",
"summary": "SUSE Bug 1138459 for CVE-2019-10160",
"url": "https://bugzilla.suse.com/1138459"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2019-10160"
},
{
"cve": "CVE-2019-16056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16056"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16056",
"url": "https://www.suse.com/security/cve/CVE-2019-16056"
},
{
"category": "external",
"summary": "SUSE Bug 1149955 for CVE-2019-16056",
"url": "https://bugzilla.suse.com/1149955"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-16056"
},
{
"cve": "CVE-2019-16935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16935"
}
],
"notes": [
{
"category": "general",
"text": "The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16935",
"url": "https://www.suse.com/security/cve/CVE-2019-16935"
},
{
"category": "external",
"summary": "SUSE Bug 1153238 for CVE-2019-16935",
"url": "https://bugzilla.suse.com/1153238"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-16935"
},
{
"cve": "CVE-2019-18348",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-18348"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1; v3.6.11, v3.6.11rc1, v3.6.12; v3.7.8, v3.7.8rc1, v3.7.9; v3.8.3, v3.8.3rc1, v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-18348",
"url": "https://www.suse.com/security/cve/CVE-2019-18348"
},
{
"category": "external",
"summary": "SUSE Bug 1155094 for CVE-2019-18348",
"url": "https://bugzilla.suse.com/1155094"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-18348"
},
{
"cve": "CVE-2019-5010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5010"
}
],
"notes": [
{
"category": "general",
"text": "An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5010",
"url": "https://www.suse.com/security/cve/CVE-2019-5010"
},
{
"category": "external",
"summary": "SUSE Bug 1122191 for CVE-2019-5010",
"url": "https://bugzilla.suse.com/1122191"
},
{
"category": "external",
"summary": "SUSE Bug 1126909 for CVE-2019-5010",
"url": "https://bugzilla.suse.com/1126909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5010"
},
{
"cve": "CVE-2019-9636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9636"
}
],
"notes": [
{
"category": "general",
"text": "Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9636",
"url": "https://www.suse.com/security/cve/CVE-2019-9636"
},
{
"category": "external",
"summary": "SUSE Bug 1129346 for CVE-2019-9636",
"url": "https://bugzilla.suse.com/1129346"
},
{
"category": "external",
"summary": "SUSE Bug 1135433 for CVE-2019-9636",
"url": "https://bugzilla.suse.com/1135433"
},
{
"category": "external",
"summary": "SUSE Bug 1138459 for CVE-2019-9636",
"url": "https://bugzilla.suse.com/1138459"
},
{
"category": "external",
"summary": "SUSE Bug 1145004 for CVE-2019-9636",
"url": "https://bugzilla.suse.com/1145004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-9636"
},
{
"cve": "CVE-2019-9674",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9674"
}
],
"notes": [
{
"category": "general",
"text": "Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9674",
"url": "https://www.suse.com/security/cve/CVE-2019-9674"
},
{
"category": "external",
"summary": "SUSE Bug 1162825 for CVE-2019-9674",
"url": "https://bugzilla.suse.com/1162825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-9674"
},
{
"cve": "CVE-2019-9947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9947"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9947",
"url": "https://www.suse.com/security/cve/CVE-2019-9947"
},
{
"category": "external",
"summary": "SUSE Bug 1130840 for CVE-2019-9947",
"url": "https://bugzilla.suse.com/1130840"
},
{
"category": "external",
"summary": "SUSE Bug 1136184 for CVE-2019-9947",
"url": "https://bugzilla.suse.com/1136184"
},
{
"category": "external",
"summary": "SUSE Bug 1155094 for CVE-2019-9947",
"url": "https://bugzilla.suse.com/1155094"
},
{
"category": "external",
"summary": "SUSE Bug 1201559 for CVE-2019-9947",
"url": "https://bugzilla.suse.com/1201559"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-9947"
},
{
"cve": "CVE-2019-9948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9948"
}
],
"notes": [
{
"category": "general",
"text": "urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen(\u0027local_file:///etc/passwd\u0027) call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9948",
"url": "https://www.suse.com/security/cve/CVE-2019-9948"
},
{
"category": "external",
"summary": "SUSE Bug 1130847 for CVE-2019-9948",
"url": "https://bugzilla.suse.com/1130847"
},
{
"category": "external",
"summary": "SUSE Bug 1135433 for CVE-2019-9948",
"url": "https://bugzilla.suse.com/1135433"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-9948"
},
{
"cve": "CVE-2020-8492",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8492"
}
],
"notes": [
{
"category": "general",
"text": "Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8492",
"url": "https://www.suse.com/security/cve/CVE-2020-8492"
},
{
"category": "external",
"summary": "SUSE Bug 1162367 for CVE-2020-8492",
"url": "https://bugzilla.suse.com/1162367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-8492"
},
{
"cve": "CVE-2021-23336",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23336"
}
],
"notes": [
{
"category": "general",
"text": "The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23336",
"url": "https://www.suse.com/security/cve/CVE-2021-23336"
},
{
"category": "external",
"summary": "SUSE Bug 1182179 for CVE-2021-23336",
"url": "https://bugzilla.suse.com/1182179"
},
{
"category": "external",
"summary": "SUSE Bug 1182379 for CVE-2021-23336",
"url": "https://bugzilla.suse.com/1182379"
},
{
"category": "external",
"summary": "SUSE Bug 1182433 for CVE-2021-23336",
"url": "https://bugzilla.suse.com/1182433"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-23336"
},
{
"cve": "CVE-2021-3177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3177"
}
],
"notes": [
{
"category": "general",
"text": "Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3177",
"url": "https://www.suse.com/security/cve/CVE-2021-3177"
},
{
"category": "external",
"summary": "SUSE Bug 1181126 for CVE-2021-3177",
"url": "https://bugzilla.suse.com/1181126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3177"
},
{
"cve": "CVE-2021-3733",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3733"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a flaw in urllib\u0027s AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3733",
"url": "https://www.suse.com/security/cve/CVE-2021-3733"
},
{
"category": "external",
"summary": "SUSE Bug 1189287 for CVE-2021-3733",
"url": "https://bugzilla.suse.com/1189287"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2021-3733"
},
{
"cve": "CVE-2021-3737",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3737"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3737",
"url": "https://www.suse.com/security/cve/CVE-2021-3737"
},
{
"category": "external",
"summary": "SUSE Bug 1189241 for CVE-2021-3737",
"url": "https://bugzilla.suse.com/1189241"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-32bit-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-curses-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-demo-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-gdbm-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-idle-2.7.18-8.1.x86_64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.aarch64",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.ppc64le",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.s390x",
"openSUSE Tumbleweed:python-tk-2.7.18-8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3737"
}
]
}
GSD-2008-2315
Vulnerability from gsd - Updated: 2023-12-13 01:23Details
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2008-2315",
"description": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"id": "GSD-2008-2315",
"references": [
"https://www.suse.com/security/cve/CVE-2008-2315.html",
"https://www.debian.org/security/2008/dsa-1667",
"https://access.redhat.com/errata/RHSA-2009:1178",
"https://access.redhat.com/errata/RHSA-2009:1177",
"https://access.redhat.com/errata/RHSA-2009:1176",
"https://linux.oracle.com/cve/CVE-2008-2315.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2008-2315"
],
"details": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"id": "GSD-2008-2315",
"modified": "2023-12-13T01:23:01.032847Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-2315",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "SUSE-SR:2008:017",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
},
{
"name": "ADV-2008-2288",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/2288"
},
{
"name": "32793",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/32793"
},
{
"name": "python-multiple-bo(44173)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
},
{
"name": "30491",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/30491"
},
{
"name": "38675",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/38675"
},
{
"name": "33937",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/33937"
},
{
"name": "oval:org.mitre.oval:def:8683",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
},
{
"name": "37471",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/37471"
},
{
"name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
},
{
"name": "31687",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31687"
},
{
"name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
},
{
"name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
"refsource": "CONFIRM",
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
},
{
"name": "GLSA-200807-16",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
},
{
"name": "http://support.apple.com/kb/HT3438",
"refsource": "CONFIRM",
"url": "http://support.apple.com/kb/HT3438"
},
{
"name": "APPLE-SA-2009-02-12",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
},
{
"name": "31358",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31358"
},
{
"name": "31332",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31332"
},
{
"name": "USN-632-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/usn-632-1"
},
{
"name": "MDVSA-2008:164",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
},
{
"name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
},
{
"name": "31518",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31518"
},
{
"name": "oval:org.mitre.oval:def:9761",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
},
{
"name": "python-modules-bo(44172)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
},
{
"name": "31305",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31305"
},
{
"name": "http://bugs.gentoo.org/show_bug.cgi?id=230640",
"refsource": "CONFIRM",
"url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
},
{
"name": "31365",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31365"
},
{
"name": "http://support.avaya.com/css/P8/documents/100074697",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/css/P8/documents/100074697"
},
{
"name": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900",
"refsource": "CONFIRM",
"url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
},
{
"name": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view",
"refsource": "CONFIRM",
"url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
},
{
"name": "DSA-1667",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2008/dsa-1667"
},
{
"name": "MDVSA-2008:163",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
},
{
"name": "SSA:2008-217-01",
"refsource": "SLACKWARE",
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
},
{
"name": "ADV-2009-3316",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/3316"
},
{
"name": "oval:org.mitre.oval:def:8445",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.5.2",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-2315"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-190"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view",
"refsource": "CONFIRM",
"tags": [
"Exploit"
],
"url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
},
{
"name": "http://bugs.gentoo.org/show_bug.cgi?id=230640",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
},
{
"name": "GLSA-200807-16",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
},
{
"name": "MDVSA-2008:164",
"refsource": "MANDRIVA",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
},
{
"name": "SSA:2008-217-01",
"refsource": "SLACKWARE",
"tags": [
"Third Party Advisory"
],
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
},
{
"name": "31305",
"refsource": "SECUNIA",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31305"
},
{
"name": "31365",
"refsource": "SECUNIA",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31365"
},
{
"name": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
},
{
"name": "SUSE-SR:2008:017",
"refsource": "SUSE",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
},
{
"name": "31358",
"refsource": "SECUNIA",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31358"
},
{
"name": "30491",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/30491"
},
{
"name": "31332",
"refsource": "SECUNIA",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31332"
},
{
"name": "USN-632-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-632-1"
},
{
"name": "31518",
"refsource": "SECUNIA",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31518"
},
{
"name": "MDVSA-2008:163",
"refsource": "MANDRIVA",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
},
{
"name": "31687",
"refsource": "SECUNIA",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31687"
},
{
"name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
"refsource": "MLIST",
"tags": [
"Mailing List"
],
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
},
{
"name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
"refsource": "MLIST",
"tags": [
"Mailing List"
],
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
},
{
"name": "APPLE-SA-2009-02-12",
"refsource": "APPLE",
"tags": [
"Mailing List"
],
"url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
},
{
"name": "33937",
"refsource": "SECUNIA",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/33937"
},
{
"name": "DSA-1667",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2008/dsa-1667"
},
{
"name": "32793",
"refsource": "SECUNIA",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/32793"
},
{
"name": "http://support.apple.com/kb/HT3438",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://support.apple.com/kb/HT3438"
},
{
"name": "ADV-2009-3316",
"refsource": "VUPEN",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/3316"
},
{
"name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
},
{
"name": "37471",
"refsource": "SECUNIA",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/37471"
},
{
"name": "http://support.avaya.com/css/P8/documents/100074697",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/css/P8/documents/100074697"
},
{
"name": "38675",
"refsource": "SECUNIA",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/38675"
},
{
"name": "ADV-2008-2288",
"refsource": "VUPEN",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/2288"
},
{
"name": "python-multiple-bo(44173)",
"refsource": "XF",
"tags": [
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
},
{
"name": "python-modules-bo(44172)",
"refsource": "XF",
"tags": [
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
},
{
"name": "oval:org.mitre.oval:def:9761",
"refsource": "OVAL",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
},
{
"name": "oval:org.mitre.oval:def:8683",
"refsource": "OVAL",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
},
{
"name": "oval:org.mitre.oval:def:8445",
"refsource": "OVAL",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
},
{
"name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
"refsource": "BUGTRAQ",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": true,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2023-08-02T17:14Z",
"publishedDate": "2008-08-01T14:41Z"
}
}
}
GHSA-75RQ-49F3-27R2
Vulnerability from github – Published: 2022-05-01 23:48 – Updated: 2022-05-01 23:48
VLAI?
Details
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
{
"affected": [],
"aliases": [
"CVE-2008-2315"
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2008-08-01T14:41:00Z",
"severity": "HIGH"
},
"details": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
"id": "GHSA-75rq-49f3-27r2",
"modified": "2022-05-01T23:48:50Z",
"published": "2022-05-01T23:48:50Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
},
{
"type": "WEB",
"url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
},
{
"type": "WEB",
"url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/31305"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/31332"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/31358"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/31365"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/31518"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/31687"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/32793"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/33937"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/37471"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/38675"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
},
{
"type": "WEB",
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
},
{
"type": "WEB",
"url": "http://support.apple.com/kb/HT3438"
},
{
"type": "WEB",
"url": "http://support.avaya.com/css/P8/documents/100074697"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2008/dsa-1667"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
},
{
"type": "WEB",
"url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/30491"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/usn-632-1"
},
{
"type": "WEB",
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/2288"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2009/3316"
}
],
"schema_version": "1.4.0",
"severity": []
}
FKIE_CVE-2008-2315
Vulnerability from fkie_nvd - Published: 2008-08-01 14:41 - Updated: 2025-04-09 00:30
Severity ?
Summary
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
References
| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | http://bugs.gentoo.org/attachment.cgi?id=159418&action=view | Exploit | |
| cve@mitre.org | http://bugs.gentoo.org/show_bug.cgi?id=230640 | Third Party Advisory | |
| cve@mitre.org | http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html | Mailing List | |
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/31305 | Broken Link | |
| cve@mitre.org | http://secunia.com/advisories/31332 | Broken Link | |
| cve@mitre.org | http://secunia.com/advisories/31358 | Broken Link | |
| cve@mitre.org | http://secunia.com/advisories/31365 | Broken Link | |
| cve@mitre.org | http://secunia.com/advisories/31518 | Broken Link | |
| cve@mitre.org | http://secunia.com/advisories/31687 | Broken Link | |
| cve@mitre.org | http://secunia.com/advisories/32793 | Broken Link | |
| cve@mitre.org | http://secunia.com/advisories/33937 | Broken Link | |
| cve@mitre.org | http://secunia.com/advisories/37471 | Broken Link | |
| cve@mitre.org | http://secunia.com/advisories/38675 | Broken Link | |
| cve@mitre.org | http://security.gentoo.org/glsa/glsa-200807-16.xml | Third Party Advisory | |
| cve@mitre.org | http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 | Third Party Advisory | |
| cve@mitre.org | http://support.apple.com/kb/HT3438 | Third Party Advisory | |
| cve@mitre.org | http://support.avaya.com/css/P8/documents/100074697 | Third Party Advisory | |
| cve@mitre.org | http://www.debian.org/security/2008/dsa-1667 | Third Party Advisory | |
| cve@mitre.org | http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 | Broken Link, Third Party Advisory | |
| cve@mitre.org | http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 | Broken Link, Third Party Advisory | |
| cve@mitre.org | http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 | Third Party Advisory | |
| cve@mitre.org | http://www.openwall.com/lists/oss-security/2008/11/05/2 | Mailing List | |
| cve@mitre.org | http://www.openwall.com/lists/oss-security/2008/11/05/3 | Mailing List | |
| cve@mitre.org | http://www.securityfocus.com/archive/1/507985/100/0/threaded | Third Party Advisory, VDB Entry | |
| cve@mitre.org | http://www.securityfocus.com/bid/30491 | Third Party Advisory, VDB Entry | |
| cve@mitre.org | http://www.ubuntu.com/usn/usn-632-1 | Third Party Advisory | |
| cve@mitre.org | http://www.vmware.com/security/advisories/VMSA-2009-0016.html | Third Party Advisory | |
| cve@mitre.org | http://www.vupen.com/english/advisories/2008/2288 | Broken Link, Third Party Advisory | |
| cve@mitre.org | http://www.vupen.com/english/advisories/2009/3316 | Broken Link, Third Party Advisory | |
| cve@mitre.org | https://exchange.xforce.ibmcloud.com/vulnerabilities/44172 | VDB Entry | |
| cve@mitre.org | https://exchange.xforce.ibmcloud.com/vulnerabilities/44173 | VDB Entry | |
| cve@mitre.org | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445 | Broken Link | |
| cve@mitre.org | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683 | Broken Link | |
| cve@mitre.org | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://bugs.gentoo.org/attachment.cgi?id=159418&action=view | Exploit | |
| af854a3a-2127-422b-91ae-364da2661108 | http://bugs.gentoo.org/show_bug.cgi?id=230640 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html | Mailing List | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/31305 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/31332 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/31358 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/31365 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/31518 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/31687 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/32793 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/33937 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/37471 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/38675 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://security.gentoo.org/glsa/glsa-200807-16.xml | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://support.apple.com/kb/HT3438 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://support.avaya.com/css/P8/documents/100074697 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2008/dsa-1667 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 | Broken Link, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 | Broken Link, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2008/11/05/2 | Mailing List | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2008/11/05/3 | Mailing List | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/archive/1/507985/100/0/threaded | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/30491 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.ubuntu.com/usn/usn-632-1 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vmware.com/security/advisories/VMSA-2009-0016.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2008/2288 | Broken Link, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2009/3316 | Broken Link, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://exchange.xforce.ibmcloud.com/vulnerabilities/44172 | VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | https://exchange.xforce.ibmcloud.com/vulnerabilities/44173 | VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761 | Broken Link |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9E0806D1-04EA-492A-8587-1886F47ECC80",
"versionEndIncluding": "2.5.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031."
},
{
"lang": "es",
"value": "M\u00faltiples desbordamientos de enteros en Python 2.5.2 y anteriores. Permite a atacantes dependientes de contexto a tener un impacto desconocido a trav\u00e9s de vectores relacionados con el (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, y los m\u00f3dulos (6) stropmodule, (7) gcmodule, and (8) mmapmodule."
}
],
"id": "CVE-2008-2315",
"lastModified": "2025-04-09T00:30:58.490",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": true,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2008-08-01T14:41:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit"
],
"url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31305"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31332"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31358"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31365"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31518"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31687"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/32793"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/33937"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/37471"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/38675"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://support.apple.com/kb/HT3438"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/css/P8/documents/100074697"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2008/dsa-1667"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List"
],
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/30491"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-632-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/2288"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/3316"
},
{
"source": "cve@mitre.org",
"tags": [
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
},
{
"source": "cve@mitre.org",
"tags": [
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
],
"url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31305"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31332"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31358"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31365"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31518"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/31687"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/32793"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/33937"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/37471"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://secunia.com/advisories/38675"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://support.apple.com/kb/HT3438"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/css/P8/documents/100074697"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2008/dsa-1667"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/30491"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/usn-632-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2008/2288"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/3316"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-190"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…