RHSA-2016:1166Medium

Red Hat Security Advisory: python27 security, bug fix, and enhancement update

Published
May 31, 2016
Last Modified
October 5, 2026

🔗 CVE IDs covered (2)

CVE-2013-2099 →CVE-2013-7440 →

📋 Description

CVE-2013-2099 — python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns CVE-2013-7440 — python: wildcard matching rules do not follow RFC 6125

🎯 Affected products200

  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
  • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • python27-0:1.1-25.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • python27-0:1.1-25.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • python27-0:1.1-25.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
  • python27-0:1.1-25.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • python27-0:1.1-25.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • python27-0:1.1-25.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • python27-0:1.1-25.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
  • python27-0:1.1-25.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • python27-0:1.1-25.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • python27-0:1.1-25.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
  • python27-0:1.1-25.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
  • python27-0:1.1-25.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • python27-0:1.1-25.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • python27-0:1.1-25.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
  • python27-0:1.1-25.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
  • python27-0:1.1-25.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • python27-PyYAML-0:3.10-14.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • python27-PyYAML-0:3.10-14.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • python27-PyYAML-0:3.10-14.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
  • python27-PyYAML-0:3.10-14.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
  • python27-PyYAML-0:3.10-14.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
  • python27-PyYAML-0:3.10-14.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (15)