Synopsis: Low: python security, bug fix, and enhancement update
Advisory ID: SLSA-2016:2586-2
Issue Date: 2016-11-03
CVE Numbers: CVE-2016-5636
—
Security Fix(es):
* A vulnerability was discovered in Python, in the built-in zipimporter. A
specially crafted zip file placed in a module path such that it would be
loaded by a later “import” statement could cause a heap overflow, leading
to arbitrary code execution. (CVE-2016-5636)
Additional Changes:
—
SL7
x86_64
python-2.7.5-48.el7.x86_64.rpm
python-debuginfo-2.7.5-48.el7.i686.rpm
python-debuginfo-2.7.5-48.el7.x86_64.rpm
python-libs-2.7.5-48.el7.i686.rpm
python-libs-2.7.5-48.el7.x86_64.rpm
python-debug-2.7.5-48.el7.x86_64.rpm
python-devel-2.7.5-48.el7.x86_64.rpm
python-test-2.7.5-48.el7.x86_64.rpm
python-tools-2.7.5-48.el7.x86_64.rpm
tkinter-2.7.5-48.el7.x86_64.rpm
– Scientific Linux Development Team
