Updated python package fixes security vulnerabilities :

Denial of service flaws due to unbound readline() calls in the imaplib, poplib, and smtplib modules (CVE-2013-1752).

A gzip bomb and unbound read denial of service flaw in python XMLRPC library (CVE-2013-1753).

Python was updated to 3.3.5 fixing bugs and security issues :

  - bugfix-only release, closes several security bugs

  - CVE-2013-1752 (bnc#856836) - DoS flaws with unbounded     reads from network

  - disable SSLv2 by default

  - DoS on maliciously crafted zip files (CVE-2013-7338,     bnc#869222)

  - CGIHttpRequestHandler directory traversal

  - gzip decompression bomb in xmlrpc client (CVE-2013-1753,     bnc#856835) xmlrpc_gzip_33.patch

  - potential buffer overflow in recvfrom_into     (CVE-2014-1912, bnc#863741)

  - hundreds of non-security-related bugfixes

Updated python packages fix security vulnerabilities :

A vulnerability was reported in Python's socket module, due to a boundary error within the sock_recvfrom_into() function, which could be exploited to cause a buffer overflow. This could be used to crash a Python application that uses the socket.recvfrom_info() function or, possibly, execute arbitrary code with the permissions of the user running vulnerable Python code (CVE-2014-1912).

This updates the python package to version 2.7.6, which fixes several other bugs, including denial of service flaws due to unbound readline() calls in the ftplib and nntplib modules (CVE-2013-1752).

Denial of service flaws due to unbound readline() calls in the imaplib, poplib, and smtplib modules (CVE-2013-1752).

A gzip bomb and unbound read denial of service flaw in python XMLRPC library (CVE-2013-1753).

Python are susceptible to arbitrary process memory reading by a user or adversary due to a bug in the _json module caused by insufficient bounds checking. The bug is caused by allowing the user to supply a negative value that is used an an array index, causing the scanstring function to access process memory outside of the string it is intended to access (CVE-2014-4616).

The CGIHTTPServer Python module does not properly handle URL-encoded path separators in URLs. This may enable attackers to disclose a CGI script's source code or execute arbitrary scripts in the server's document root (CVE-2014-4650).

Python before 2.7.8 is vulnerable to an integer overflow in the buffer type (CVE-2014-7185).

When Python's standard library HTTP clients (httplib, urllib, urllib2, xmlrpclib) are used to access resources with HTTPS, by default the certificate is not checked against any trust store, nor is the hostname in the certificate checked against the requested host. It was possible to configure a trust root to be checked against, however there were no faculties for hostname checking (CVE-2014-9365).

The python-pip and tix packages was added due to missing build dependencies.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2101 advisory.

    Python is an interpreted, interactive, object-oriented programming language     often compared to Tcl, Perl, Scheme, or Java. Python includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing.
    Python supports interfaces to many system calls and libraries, as well as     to various windowing systems (X11, Motif, Tk, Mac and MFC).

    It was discovered that the Python xmlrpclib module did not restrict the     size of gzip-compressed HTTP responses. A malicious XMLRPC server could     cause an XMLRPC client using xmlrpclib to consume an excessive amount of     memory. (CVE-2013-1753)

    It was discovered that multiple Python standard library modules     implementing network protocols (such as httplib or smtplib) failed to     restrict the sizes of server responses. A malicious server could cause a     client using one of the affected modules to consume an excessive amount of     memory. (CVE-2013-1752)

    It was discovered that the CGIHTTPServer module incorrectly handled URL     encoded paths. A remote attacker could use this flaw to execute scripts     outside of the cgi-bin directory, or disclose the source code of the     scripts in the cgi-bin directory. (CVE-2014-4650)

    An integer overflow flaw was found in the way the buffer() function handled     its offset and size arguments. An attacker able to control these arguments     could use this flaw to disclose portions of the application memory or cause     it to crash. (CVE-2014-7185)

    A flaw was found in the way the json module handled negative index     arguments passed to certain functions (such as raw_decode()). An attacker     able to control the index value passed to one of the affected functions     could possibly use this flaw to disclose portions of the application     memory. (CVE-2014-4616)

    The Python standard library HTTP client modules (such as httplib or urllib)     did not perform verification of TLS/SSL certificates when connecting to     HTTPS servers. A man-in-the-middle attacker could use this flaw to hijack     connections and eavesdrop or modify transferred data. (CVE-2014-9365)

    Note: The Python standard library was updated to make it possible to enable     certificate verification by default. However, for backwards compatibility,     verification remains disabled by default. Future updates may change this     default. Refer to the Knowledgebase article 2039753 linked to in the     References section for further details about this change. (BZ#1219108)

    This update also fixes the following bugs:

    * Subprocesses used with the Eventlet library or regular threads previously     tried to close epoll file descriptors twice, which led to an Invalid     argument error. Subprocesses have been fixed to close the file descriptors     only once. (BZ#1103452)

    * When importing the readline module from a Python script, Python no longer     produces erroneous random characters on stdout. (BZ#1189301)

    * The cProfile utility has been fixed to print all values that the -s     option supports when this option is used without a correct value.
    (BZ#1237107)

    * The load_cert_chain() function now accepts None as a keyfile argument.
    (BZ#1250611)

    In addition, this update adds the following enhancements:

    * Security enhancements as described in PEP 466 have been backported to the     Python standard library, for example, new features of the ssl module:
    Server Name Indication (SNI) support, support for new TLSv1.x protocols,     new hash algorithms in the hashlib module, and many more. (BZ#1111461)

    * Support for the ssl.PROTOCOL_TLSv1_2 protocol has been added to the ssl     library. (BZ#1192015)

    * The ssl.SSLSocket.version() method is now available to access information     about the version of the SSL protocol used in a connection. (BZ#1259421)

    All python users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues and add these     enhancements.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2101 advisory.

    - Fixed CVE-2013-1753, CVE-2013-1752, CVE-2014-4616, CVE-2014-4650, CVE-2014-7185     Resolves: rhbz#1206574

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated python packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme, or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems (X11, Motif, Tk, Mac and MFC).

It was discovered that the Python xmlrpclib module did not restrict the size of gzip-compressed HTTP responses. A malicious XMLRPC server could cause an XMLRPC client using xmlrpclib to consume an excessive amount of memory. (CVE-2013-1753)

It was discovered that multiple Python standard library modules implementing network protocols (such as httplib or smtplib) failed to restrict the sizes of server responses. A malicious server could cause a client using one of the affected modules to consume an excessive amount of memory. (CVE-2013-1752)

It was discovered that the CGIHTTPServer module incorrectly handled URL encoded paths. A remote attacker could use this flaw to execute scripts outside of the cgi-bin directory, or disclose the source code of the scripts in the cgi-bin directory. (CVE-2014-4650)

An integer overflow flaw was found in the way the buffer() function handled its offset and size arguments. An attacker able to control these arguments could use this flaw to disclose portions of the application memory or cause it to crash. (CVE-2014-7185)

A flaw was found in the way the json module handled negative index arguments passed to certain functions (such as raw_decode()). An attacker able to control the index value passed to one of the affected functions could possibly use this flaw to disclose portions of the application memory. (CVE-2014-4616)

The Python standard library HTTP client modules (such as httplib or urllib) did not perform verification of TLS/SSL certificates when connecting to HTTPS servers. A man-in-the-middle attacker could use this flaw to hijack connections and eavesdrop or modify transferred data. (CVE-2014-9365)

Note: The Python standard library was updated to make it possible to enable certificate verification by default. However, for backwards compatibility, verification remains disabled by default. Future updates may change this default. Refer to the Knowledgebase article 2039753 linked to in the References section for further details about this change. (BZ#1219108)

This update also fixes the following bugs :

* Subprocesses used with the Eventlet library or regular threads previously tried to close epoll file descriptors twice, which led to an 'Invalid argument' error. Subprocesses have been fixed to close the file descriptors only once. (BZ#1103452)

* When importing the readline module from a Python script, Python no longer produces erroneous random characters on stdout. (BZ#1189301)

* The cProfile utility has been fixed to print all values that the '-s' option supports when this option is used without a correct value.
(BZ#1237107)

* The load_cert_chain() function now accepts 'None' as a keyfile argument. (BZ#1250611)

In addition, this update adds the following enhancements :

* Security enhancements as described in PEP 466 have been backported to the Python standard library, for example, new features of the ssl module: Server Name Indication (SNI) support, support for new TLSv1.x protocols, new hash algorithms in the hashlib module, and many more.
(BZ#1111461)

* Support for the ssl.PROTOCOL_TLSv1_2 protocol has been added to the ssl library. (BZ#1192015)

* The ssl.SSLSocket.version() method is now available to access information about the version of the SSL protocol used in a connection. (BZ#1259421)

All python users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1064 advisory.

    Python is an interpreted, interactive, object-oriented programming language     that supports modules, classes, exceptions, high-level dynamic data types,     and dynamic typing. The python27 collection provide a stable release of     Python 2.7 with a number of additional utilities and database connectors     for MySQL and PostgreSQL.

    The python27-python packages have been upgraded to upstream version 2.7.8,     which provides numerous bug fixes over the previous version. (BZ#1167912)

    The following security issues were fixed in the python27-python component:

    It was discovered that the socket.recvfrom_into() function failed to check     the size of the supplied buffer. This could lead to a buffer overflow when     the function was called with an insufficiently sized buffer.
    (CVE-2014-1912)

    It was discovered that the Python xmlrpclib module did not restrict the     size of gzip-compressed HTTP responses. A malicious XMLRPC server could     cause an XMLRPC client using xmlrpclib to consume an excessive amount of     memory. (CVE-2013-1753)

    It was discovered that multiple Python standard library modules     implementing network protocols (such as httplib or smtplib) failed to     restrict the sizes of server responses. A malicious server could cause a     client using one of the affected modules to consume an excessive amount of     memory. (CVE-2013-1752)

    It was discovered that the CGIHTTPServer module incorrectly handled URL     encoded paths. A remote attacker could use this flaw to execute scripts     outside of the cgi-bin directory, or disclose the source code of the     scripts in the cgi-bin directory. (CVE-2014-4650)

    An integer overflow flaw was found in the way the buffer() function handled     its offset and size arguments. An attacker able to control these arguments     could use this flaw to disclose portions of the application memory or cause     it to crash. (CVE-2014-7185)

    The following security issue was fixed in the python27-python and     python27-python-simplejson components:

    A flaw was found in the way the json module handled negative index     arguments passed to certain functions (such as raw_decode()). An attacker     able to control the index value passed to one of the affected functions     could possibly use this flaw to disclose portions of the application     memory. (CVE-2014-4616)

    In addition, this update adds the following enhancement:

    * The python27 Software Collection now includes the python-wheel and     python-pip modules. (BZ#994189, BZ#1167902)

    All python27 users are advised to upgrade to these updated packages, which     correct these issues and add these enhancements. All running python27     instances must be restarted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-803:01 advisory.

    IPy is a Python module for handling IPv4 and IPv6 Addresses and Networks     in a fashion similar to perl's Net::IP and friends. The IP class allows     a comfortable parsing and handling for most notations in use for IPv4     and IPv6 Addresses and Networks.
    Security issues fixed with this release:
    CVE-2013-1752
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2013-1753
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2014-4616
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2014-4650
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2014-7185     Integer overflow in bufferobject.c in Python before 2.7.8 allows     context-dependent attackers to obtain sensitive information from     process memory via a large size and offset in a buffer function.
    Fixed bugs:
    * Subprocesses used with the Eventlet library or regular threads previously tried to close epoll file     descriptors twice, which led to an Invalid argument error. Subprocesses have been fixed to close the     file descriptors only once.
    * When importing the readline module from a Python script, Python no longer produces erroneous random     characters on stdout.
    * The cProfile utility has been fixed to print all values that the -s option supports when this option     is used without a correct value.
    * The load_cert_chain() function now accepts None as a keyfile argument.
    Enhancements:
    * Security enhancements as described in PEP 466 have been backported to the Python standard library, for     example, new features of the ssl module: Server Name Indication (SNI) support, support for new TLSv1.x     protocols, new hash algorithms in the hashlib module, and many more.
    * Support for the ssl.PROTOCOL_TLSv1_2 protocol has been added to the ssl library.
    * The ssl.SSLSocket.version() method is now available to access information about the version of the SSL     protocol used in a connection.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
73449	Mandriva Linux Security Advisory : python (MDVSA-2014:074)	Nessus	Mandriva Local Security Checks	2014/4/10	2021/1/6	medium
75315	openSUSE Security Update : python3 (openSUSE-SU-2014:0498-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high
82328	Mandriva Linux Security Advisory : python (MDVSA-2015:075)	Nessus	Mandriva Local Security Checks	2015/3/30	2021/1/6	high
86968	RHEL 7 : python (RHSA-2015:2101)	Nessus	Red Hat Local Security Checks	2015/11/20	2025/8/29	critical
87020	Oracle Linux 7 : python (ELSA-2015-2101)	Nessus	Oracle Linux Local Security Checks	2015/11/24	2025/8/29	critical
87129	CentOS 7 : python (CESA-2015:2101)	Nessus	CentOS Local Security Checks	2015/12/2	2021/1/4	critical
210167	RHEL 6 / 7 : python27 (RHSA-2015:1064)	Nessus	Red Hat Local Security Checks	2024/11/4	2025/9/1	critical
289468	MiracleLinux 7 : python-2.7.5-34.0.1.el7.AXS7 (AXSA:2015-803:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical

检测

插件搜索

medium

high

high

critical

critical

critical

critical

critical