Issued:

2013-02-20

Updated:

2013-02-20

RHBA-2013:0472 - python-paste bug fix update

Synopsis

python-paste bug fix update

Type/Severity

Bug Fix Advisory (none)

Topic

An updated python-paste package that fixes one bug is now available for Red Hat Enterprise Linux 6.

Description

Python Paste provides middleware for building and running Python web applications.

This update fixes the following bug:

• Previously, the auth_tkt plugin used MD5 checksums, which are not FIPS (Federal Information Processing Standard) compliant. Consequently, when FIPS compliance mode was active on the system, auth_tkt failed. The auth_tkt plugin has been set to use Secure Hash Algorithm (SHA) 256, which is FIPS-compliant, instead of MD5 checksums. As a result, auth-tkt no longer fails in this situation. (BZ#783158)

All users of python-paste are advised to upgrade to this updated package, which fixes this bug.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

Affected Products

Updated Packages

• python-paste-1.7.4-2.el6.noarch.rpm
• python-paste-1.7.4-2.el6.src.rpm

Fixes

(none)

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.