Issued:

2013-11-20

Updated:

2013-11-20

RHBA-2013:1724 - python-beaker bug fix update

Synopsis

python-beaker bug fix update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated python-beaker packages that fix one bug and are now available for Red Hat Enterprise Linux 6.

Description

The python-beaker package provides Beaker, a web session and general caching library that includes Web Server Gateway Interface (WSGI) middleware for use in web applications.

This update fixes the following bug:

• Previously, Beaker used the MD5 algorithm to produce a unique hex-encoded session identifier. However, this algorithm is not, by default, supported by Python's runtime in FIPS mode. Consequently, web applications that used Beaker failed to create new sessions in certain environments. With this update, MD5 has been replaced with the SHA1 algorithm and the subsequent hex encoding with the Base64 encoding scheme. As a result, Beaker works correctly in FIPS environment. (BZ#983292)

Users of python-beaker are advised to upgrade to these updated packages, which fix this bug.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

Affected Products

Updated Packages

• python-beaker-1.3.1-7.el6.noarch.rpm
• python-beaker-1.3.1-7.el6.src.rpm

Fixes

• This content is not included.BZ - 983292

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.