RHSA-2016:1630MediumCVSS 5.3
Red Hat Security Advisory: rh-python34-python security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2016-0772 — python: smtplib StartTLS stripping attack CVE-2016-5699 — python: http protocol steam injection attack CVE-2016-1000110 — CGIHandler: sets environmental variable based on user supplied Proxy request header
🎯 Affected products80
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python34-python-0:3.4.2-13.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-python34-python-0:3.4.2-13.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-python34-python-0:3.4.2-13.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-python34-python-0:3.4.2-13.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python34-python-0:3.4.2-13.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-python34-python-0:3.4.2-13.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-python34-python-0:3.4.2-13.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-python34-python-0:3.4.2-13.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python34-python-0:3.4.2-14.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
- rh-python34-python-0:3.4.2-14.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
- rh-python34-python-0:3.4.2-14.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
- rh-python34-python-0:3.4.2-14.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
- rh-python34-python-0:3.4.2-14.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
- rh-python34-python-0:3.4.2-14.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
- rh-python34-python-0:3.4.2-14.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
- rh-python34-python-0:3.4.2-14.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
- rh-python34-python-debug-0:3.4.2-13.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-python34-python-debug-0:3.4.2-13.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-python34-python-debug-0:3.4.2-13.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-python34-python-debug-0:3.4.2-13.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-python34-python-debug-0:3.4.2-14.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
- rh-python34-python-debug-0:3.4.2-14.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
- +50 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2016:1630
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1303647
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1303699
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1357334
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1630.json