Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 10.04 LTS USN-1616-1 Critical Python 3.1 Denial Of Service

ubuntu
Calendar Grey October 24, 2012
Scroller Ubuntu
Multiple critical vulnerabilities addressed in Python 3.1 across various Ubuntu versions. Ensure your system is updated for security.
Several security issues were fixed in Python 3.1.

Summary

Several security issues were fixed in Python 3.1.

Software Description:

- python3.1: An interactive high-level object-oriented language (version

3.1)

Details:

It was discovered that Python would prepend an empty string to sys.path

under certain circumstances. A local attacker with write access to the

current working directory could exploit this to execute arbitrary code.

This issue only affected Ubuntu 10.04 LTS. (CVE-2008-5983)

It was discovered that the audioop module did not correctly perform input

validation. If a user or automatated system were tricked into opening a

crafted audio file, an attacker could cause a denial of service via

application crash. These issues only affected Ubuntu 10.04 LTS.

(CVE-2010-1634, CVE-2010-2089)

It was discovered that Python distutils contained a race condition when

creating the ~/.pypirc file. A local attacker could exploit this to obtain

sensitive information. (CVE-2011-4944)

It was discovered that SimpleXMLRPCSer...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical software update Ubuntu attack Python 3.1

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  python3.1                       3.1.3-1ubuntu1.2
  python3.1-minimal               3.1.3-1ubuntu1.2

Ubuntu 10.04 LTS:
  python3.1                       3.1.2-0ubuntu3.2
  python3.1-minimal               3.1.2-0ubuntu3.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1616-1

CVE-2008-5983, CVE-2010-1634, CVE-2010-2089, CVE-2011-4944,

CVE-2012-0845, CVE-2012-1150, CVE-2012-2135

Severity
critical
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-1616-1

Topics%20covered

Topics Covered

security advisory denial of service critical software update Ubuntu attack Python 3.1

Package Information

https://launchpad.net/ubuntu/+source/python3.1/3.1.3-1ubuntu1.2
https://launchpad.net/ubuntu/+source/python3.1/3.1.2-0ubuntu3.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.