The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Aug 18, 2013 |
| Oracle Solaris | — | Upgrade runtime/python-26 to version 2.6.8-0.175.1.12.0.3.0 on Solaris 11.1 | May 29, 2017 | Aug 17, 2013 |
| Oracle_linux | — | Upgrade python-toolsUpgrade python-develUpgrade python-testUpgrade python-libsUpgrade tkinterUpgrade python | Oct 16, 2024 | Aug 18, 2013 |
| Suse | — | Upgrade python3-32bitUpgrade libpython3_2mu1_0-32bitUpgrade python3-testsuiteUpgrade python3-2to3Upgrade python-develUpgrade libpython3_3m1_0-32bitUpgrade python3-tkUpgrade python-cursesUpgrade python3-base-32bitUpgrade python3-xmlUpgrade python3-doc-pdfUpgrade libpython2_6-1_0-x86Upgrade libpython2_7-1_0-32bitUpgrade sle-sdk-releaseUpgrade python3-idleUpgrade python-gdbmUpgrade python-demoUpgrade python3Upgrade python3-dbmUpgrade python3-docUpgrade python-tkUpgrade python-docUpgrade libpython2_6-1_0Upgrade libpython2_6-1_0-32bitUpgrade python3-cursesUpgrade python3-develUpgrade python-base-x86Upgrade python-32bitUpgrade python3-baseUpgrade libpython3_2mu1_0Upgrade pythonUpgrade python-idleUpgrade python-x86Upgrade libpython2_7-1_0Upgrade python3-toolsUpgrade python-baseUpgrade libpython3_3m1_0Upgrade python-doc-pdfUpgrade python-base-32bitUpgrade python-xml | Dec 12, 2013 | Aug 17, 2013 |
| Ubuntu | — | Upgrade python2.7-minimalUpgrade python2.6-minimalUpgrade python2.7Upgrade python2.6Upgrade python3.3-minimalUpgrade python3.2-minimalUpgrade python3.3Upgrade python3.2 | Nov 8, 2024 | Aug 18, 2013 |
| Vmsa 2014 0012 | — | Upgrade VMware ESXi 5.5 to build number 2068190Upgrade VMware ESXi 5.1 to build number 2323236 | Oct 28, 2015 | Aug 17, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub