Issued:

2013-11-20

Updated:

2013-11-20

RHBA-2013:1723 - python-weberror bug fix update

Synopsis

python-weberror bug fix update

Type/Severity

Bug Fix Advisory

Topic

An updated python-weberror package that fixes one bug is now available for Red Hat Enterprise Linux 6.

Description

The python-weberror package provides WebError, a web application's error handing library for use as a Web Server Gateway Interface (WSGI) middleware.

This update fixes the following bug:

• Previously, the WebError middleware used the MD5 algorithm when assigning an identifier to the handled error. However, this algorithm is not, by default, supported by Python's runtime in FIPS mode. Consequently, when web applications raised an exception in FIPS mode and the exception was handled by WebError, incomplete error diagnostics were provided. With this update, error identification based on MD5 is not generated automatically, thus avoiding the problems when the error identifier is not processed further. (BZ#746118)

Users of python-weberror are advised to upgrade to this updated package, which fixes this bug.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

Affected Products

Updated Packages

• python-weberror-0.10.2-2.el6.noarch.rpm
• python-weberror-0.10.2-2.el6.src.rpm

Fixes

• This content is not included.BZ - 746118

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.