Updated python packages fix security vulnerabilities :

A vulnerability was reported in Python's socket module, due to a boundary error within the sock_recvfrom_into() function, which could be exploited to cause a buffer overflow. This could be used to crash a Python application that uses the socket.recvfrom_info() function or, possibly, execute arbitrary code with the permissions of the user running vulnerable Python code (CVE-2014-1912).

This updates the python package to version 2.7.6, which fixes several other bugs, including denial of service flaws due to unbound readline() calls in the ftplib and nntplib modules (CVE-2013-1752).

Denial of service flaws due to unbound readline() calls in the imaplib, poplib, and smtplib modules (CVE-2013-1752).

A gzip bomb and unbound read denial of service flaw in python XMLRPC library (CVE-2013-1753).

Python are susceptible to arbitrary process memory reading by a user or adversary due to a bug in the _json module caused by insufficient bounds checking. The bug is caused by allowing the user to supply a negative value that is used an an array index, causing the scanstring function to access process memory outside of the string it is intended to access (CVE-2014-4616).

The CGIHTTPServer Python module does not properly handle URL-encoded path separators in URLs. This may enable attackers to disclose a CGI script's source code or execute arbitrary scripts in the server's document root (CVE-2014-4650).

Python before 2.7.8 is vulnerable to an integer overflow in the buffer type (CVE-2014-7185).

When Python's standard library HTTP clients (httplib, urllib, urllib2, xmlrpclib) are used to access resources with HTTPS, by default the certificate is not checked against any trust store, nor is the hostname in the certificate checked against the requested host. It was possible to configure a trust root to be checked against, however there were no faculties for hostname checking (CVE-2014-9365).

The python-pip and tix packages was added due to missing build dependencies.

It was discovered that multiple Python standard library modules implementing network protocols (such as httplib or smtplib) failed to restrict sizes of server responses. A malicious server could cause a client using one of the affected modules to consume an excessive amount of memory.(CVE-2013-1752)

It was discovered that the Python xmlrpclib did not restrict the size of a gzip compressed HTTP responses. A malicious XMLRPC server could cause an XMLRPC client using xmlrpclib to consume an excessive amount of memory. (CVE-2013-1753)

The Python standard library HTTP client modules (such as httplib or urllib) did not perform verification of TLS/SSL certificates when connecting to HTTPS servers. A man-in-the-middle attacker could use this flaw to hijack connections and eavesdrop or modify transferred data.(CVE-2014-9365)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2653-1 advisory.

    It was discovered that multiple Python protocol libraries incorrectly limited certain data when connecting     to servers. A malicious ftp, http, imap, nntp, pop or smtp server could use this issue to cause a denial     of service. (CVE-2013-1752)

    It was discovered that the Python xmlrpc library did not limit unpacking gzip-compressed HTTP bodies. A     malicious server could use this issue to cause a denial of service. (CVE-2013-1753)

    It was discovered that the Python json module incorrectly handled a certain argument. An attacker could     possibly use this issue to read arbitrary memory and expose sensitive information. This issue only     affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-4616)

    It was discovered that the Python CGIHTTPServer incorrectly handled URL-encoded path separators in URLs. A     remote attacker could use this issue to expose sensitive information, or possibly execute arbitrary code.
    This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-4650)

    It was discovered that Python incorrectly handled sizes and offsets in buffer functions. An attacker could     possibly use this issue to read arbitrary memory and obtain sensitive information. This issue only     affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-7185)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update to python 2.7.9 fixes the following issues :

  - python-2.7-libffi-aarch64.patch: Fix argument passing in     libffi for aarch64

From the version update to 2.7.9 :

  - contains full backport of ssl module from Python 3.4     (PEP466)

  - HTTPS certificate validation enabled by default (PEP476)

  - SSLv3 disabled by default (bnc#901715)

  - backported ensurepip module (PEP477)

  - fixes several missing CVEs from last release:
    CVE-2013-1752, CVE-2013-1753

  - dropped upstreamed patches: python-2.7.6-poplib.patch,     smtplib_maxline-2.7.patch, xmlrpc_gzip_27.patch

  - dropped patch python-2.7.3-ssl_ca_path.patch because we     don't need it with ssl module from Python 3

  - libffi was upgraded upstream, seems to contain our     changes, so dropping libffi-ppc64le.diff as well

  - python-2.7-urllib2-localnet-ssl.patch - properly remove     unconditional 'import ssl' from test_urllib2_localnet     that caused it to fail without ssl

  - skip test_thread in qemu_linux_user mode

From the version update to 2.7.8 :

  - fixes CVE-2014-4650 directory traversal in CGIHTTPServer

  - fixes CVE-2014-7185 (bnc#898572) potential buffer     overflow in buffer()

Also the DH parameters were increased to 2048 bit to fix logjam security issue (bsc#935856)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2015:2101-1 advisory.

  - The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to     cause a denial of service (memory consumption) via a crafted HTTP request. (CVE-2013-1753)

  - Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson     before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index     value in the idx argument to the raw_decode function. (CVE-2014-4616)

  - The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is     used for path separators, which allows remote attackers to read script source code or conduct directory     traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f     separator. (CVE-2014-4650)

  - Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain     sensitive information from process memory via a large size and offset in a buffer function.
    (CVE-2014-7185)

  - The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka     Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the     certificate against a trust store or verify that the server hostname matches a domain name in the     subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-     middle attackers to spoof SSL servers via an arbitrary valid certificate. (CVE-2014-9365)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Python was updated to 2.7.6 to fix bugs and security issues :

  - bugfix-only release

  - SSL-related fixes

  - upstream fix for CVE-2013-4238

  - upstream fixes for CVE-2013-1752

  - added patches for CVE-2013-1752 (bnc#856836) issues that     are missing in 2.7.6: python-2.7.6-imaplib.patch     python-2.7.6-poplib.patch smtplib_maxline-2.7.patch

  - CVE-2013-1753 (bnc#856835) gzip decompression bomb in     xmlrpc client: xmlrpc_gzip_27.patch

  - python-2.7.6-bdist-rpm.patch: fix broken 'setup.py     bdist_rpm' command (bnc#857470, issue18045)

  - multilib patch: add '~/.local/lib64' paths to search     path (bnc#637176)

  - CVE-2014-1912-recvfrom_into.patch: fix potential buffer     overflow in socket.recvfrom_into (CVE-2014-1912,     bnc#863741)

  - Add Obsoletes/Provides for python-ctypes.

  - reintroduce audioop.so as the problems with it seem to     be fixed (bnc#831442)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1064 advisory.

    - Add httplib fix for CVE-2013-1752     Resolves: rhbz#1187779
    - Fixed CVE-2013-1752, CVE-2013-1753     Resolves: rhbz#1187779

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for python fixes the following issues :

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
82328	Mandriva Linux Security Advisory : python (MDVSA-2015:075)	Nessus	Mandriva Local Security Checks	2015/3/30	2021/1/6	high
84369	Amazon Linux AMI : python27 (ALAS-2015-552)	Nessus	Amazon Linux Local Security Checks	2015/6/25	2020/3/12	high
84428	Ubuntu 14.04 LTS : Python vulnerabilities (USN-2653-1)	Nessus	Ubuntu Local Security Checks	2015/6/26	2025/8/29	critical
85250	SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2015:1344-1)	Nessus	SuSE Local Security Checks	2015/8/6	2021/1/6	critical
87570	Scientific Linux Security Update : python on 7.x i686/x86_64 (2015:2101)	Nessus	Scientific Linux Local Security Checks	2015/12/22	2025/8/29	critical
75294	openSUSE Security Update : python (openSUSE-SU-2014:0380-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high
181042	Oracle Linux 6 / 7 : python27 (ELSA-2015-1064)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2025/9/1	critical
133259	SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2020:0234-1) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	2020/1/27	2024/3/28	critical

检测

插件搜索

high

high

critical

critical

critical

high

critical

critical