RHSA-2016:1627MediumCVSS 5.3
Red Hat Security Advisory: rh-python35-python security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2016-0772 — python: smtplib StartTLS stripping attack CVE-2016-5699 — python: http protocol steam injection attack CVE-2016-1000110 — CGIHandler: sets environmental variable based on user supplied Proxy request header
🎯 Affected products40
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python35-python-0:3.5.1-9.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-python35-python-0:3.5.1-9.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-python35-python-0:3.5.1-9.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-python35-python-0:3.5.1-9.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python35-python-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-python35-python-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-python35-python-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-python35-python-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python35-python-debug-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-python35-python-debug-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-python35-python-debug-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-python35-python-debug-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python35-python-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-python35-python-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-python35-python-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-python35-python-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python35-python-devel-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-python35-python-devel-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-python35-python-devel-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-python35-python-devel-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python35-python-libs-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-python35-python-libs-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-python35-python-libs-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-python35-python-libs-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python35-python-test-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-python35-python-test-0:3.5.1-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- +10 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2016:1627
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1303647
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1303699
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1357334
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1627.json