CVE catalog

CVE-2007-2052

Security update for python

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
13.64% · Oct 25, 2026

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination. python off-by-one locale.strxfrm() (possible memory disclosure) The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpython2.44.02.4.4-3vulnerable
Debianpython2.44.02.4.4-3+etch1fixed
Debianpython2.54.02.5-5vulnerable
Debianpython2.54.02.5-5+etch1fixed
Opensusepythontumbleweed2.7.18-8.1fixed
Susepythonlinux enterprise module for basesystem 152.7.17-7.32.2fixed
Susepython-baselinux enterprise module for basesystem 152.7.17-7.32.1fixed
Susepythonlinux enterprise module for basesystem 15 sp12.7.17-7.32.2fixed
Susepython-baselinux enterprise module for basesystem 15 sp12.7.17-7.32.1fixed
Susepythonlinux enterprise module for desktop applications 152.7.17-7.32.2fixed
Susepythonlinux enterprise module for desktop applications 15 sp12.7.17-7.32.2fixed
Susepythonlinux enterprise module for python 2 15 sp12.7.17-7.32.2fixed
Susepython-baselinux enterprise module for python 2 15 sp12.7.17-7.32.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpython2.4deb4.02.4.4-3+etch1Not reportedDSA-1551-1Not reported
Debianpython2.5deb4.02.5-5+etch1Not reportedDSA-1620-1Not reported
Opensusepythonrpmtumbleweed2.7.18-8.1Not reportedOPENSUSE-SU-2024:11202-1Not reported
Susepythonrpmlinux enterprise module for basesystem 152.7.17-7.32.2Not reportedSUSE-SU-2020:0234-1Not reported
Susepython-baserpmlinux enterprise module for basesystem 152.7.17-7.32.1Not reportedSUSE-SU-2020:0234-1Not reported
Susepythonrpmlinux enterprise module for basesystem 15 sp12.7.17-7.32.2Not reportedSUSE-SU-2020:0234-1Not reported
Susepython-baserpmlinux enterprise module for basesystem 15 sp12.7.17-7.32.1Not reportedSUSE-SU-2020:0234-1Not reported
Susepythonrpmlinux enterprise module for desktop applications 152.7.17-7.32.2Not reportedSUSE-SU-2020:0234-1Not reported
Susepythonrpmlinux enterprise module for desktop applications 15 sp12.7.17-7.32.2Not reportedSUSE-SU-2020:0234-1Not reported
Susepythonrpmlinux enterprise module for python 2 15 sp12.7.17-7.32.2Not reportedSUSE-SU-2020:0234-1Not reported
Susepython-baserpmlinux enterprise module for python 2 15 sp12.7.17-7.32.1Not reportedSUSE-SU-2020:0234-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]