Synopsis: Low: python security, bug fix, and enhancement update Advisory ID: SLSA-2016:2586-2 Issue Date: 2016-11-03 CVE Numbers: CVE-2016-5636 -- Security Fix(es): * A vulnerability was discovered in Python, in the built-in zipimporter. A specially crafted zip file placed in a module path such that it would be loaded by a later "import" statement could cause a heap overflow, leading to arbitrary code execution. (CVE-2016-5636) Additional Changes: -- SL7 x86_64 python-2.7.5-48.el7.x86_64.rpm python-debuginfo-2.7.5-48.el7.i686.rpm python-debuginfo-2.7.5-48.el7.x86_64.rpm python-libs-2.7.5-48.el7.i686.rpm python-libs-2.7.5-48.el7.x86_64.rpm python-debug-2.7.5-48.el7.x86_64.rpm python-devel-2.7.5-48.el7.x86_64.rpm python-test-2.7.5-48.el7.x86_64.rpm python-tools-2.7.5-48.el7.x86_64.rpm tkinter-2.7.5-48.el7.x86_64.rpm - Scientific Linux Development Team