Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 555
Alerts This Week
Warning Icon 1 555

Ubuntu 12.04 ESM: USN-3817-2 Critical Python Security Fixes

ubuntu
Calendar Grey November 15, 2018
Dist Ubuntu Esm H88
Uncover essential Python vulnerability patches in Ubuntu 12.04 ESM and delve into the specifics of security flaws coupled with enhancements.
Several security issues were fixed in Python.

Summary

Several security issues were fixed in Python.

Software Description:

- python2.7: An interactive high-level object-oriented language

Details:

USN-3817-1 fixed a vulnerability in Python. This update provides

the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 It was discovered that Python incorrectly handled large amounts of

 data. A remote attacker could use this issue to cause Python to crash,

 resulting in a denial of service, or possibly execute arbitrary code.

 (CVE-2018-1000030)

 It was discovered that Python incorrectly handled running external

 commands in the shutil module. A remote attacker could use this issue

 to cause Python to crash, resulting in a denial of service, or

 possibly execute arbitrary code. (CVE-2018-1000802)

 It was discovered that Python incorrectly used regular expressions

 vulnerable to catastrophic backtracking. A remote attacker could

 possibly use this issue to cause a denial of servic...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security fix remote execution ubuntu python dos

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  python2.7                       2.7.3-0ubuntu3.11
  python2.7-minimal               2.7.3-0ubuntu3.11

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3817-2

  https://ubuntu.com/security/notices/USN-3817-1

  CVE-2018-1000030, CVE-2018-1000802, CVE-2018-1060, CVE-2018-1061,

  CVE-2018-14647

Severity
critical
Lowest
Low
Medium
High
Critical

November 15, 2018

Topics%20covered

Topics Covered

security advisory security fix remote execution ubuntu python dos

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.