update for python
This update fixes the following security issues:
bnc#863741 (CVE-2014-1912): Fixed potential buffer overflow in socket.recvfrom_into
bnc#884075 (CVE-2014-4616): Missing boundary check in JSON module
bnc#885882 (CVE-2014-4650): CGIHTTPServer file disclosure and directory traversal through URL-encoded characters
remove link count optimizations that are incorrect on btrfs (and possibly other filesystems)
bnc#898572 (CVE-2014-7185): potential wraparound/overflow in buffer()
bnc#901715: Disable SSL2 by default
-
Submitted by
Christian Wittmer (computersalat)
Fixed bugs
bnc#863741
VUL-0: CVE-2014-1912: python: buffer overflow in socket.recvfrom_into
bnc#884075
VUL-0: CVE-2014-4616: python: missing boundary check in JSON module
bnc#885882
VUL-0: CVE-2014-4650: python: CGIHTTPServer does not properly handle encoded URL
bnc#898572
VUL-0: CVE-2014-7185: python: potential buffer overflow
bnc#901715
Disable SSL2 by default
