Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 533
Alerts This Week
Warning Icon 1 533

Ubuntu 14.04 ESM: USN-4151-2 Moderate: Python Remote Attack

ubuntu
Calendar Grey October 10, 2019
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-4152-1 highlights various vulnerabilities in the PHP library, particularly regarding potential exploits from outside sources.
Several security issues were fixed in Python.

Summary

Several security issues were fixed in Python.

Software Description:

- python2.7: An interactive high-level object-oriented language

- python3.4: An interactive high-level object-oriented language

Details:

USN-4151-1 fixed several vulnerabilities in Python. This update provides

the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that Python incorrectly parsed certain email addresses. A

remote attacker could possibly use this issue to trick Python applications

into accepting email addresses that should be denied. (CVE-2019-16056)

It was discovered that the Python documentation XML-RPC server incorrectly

handled certain fields. A remote attacker could use this issue to execute a

cross-site scripting (XSS) attack. (CVE-2019-16935)

Topics%20covered

Topics Covered

security advisory cross-site scripting remote attack Ubuntu python

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  python2.7                       2.7.6-8ubuntu0.6+esm3
  python2.7-minimal               2.7.6-8ubuntu0.6+esm3
  python3.4                       3.4.3-1ubuntu1~14.04.7+esm4
  python3.4-minimal               3.4.3-1ubuntu1~14.04.7+esm4

Ubuntu 12.04 ESM:
  python2.7                       2.7.3-0ubuntu3.15
  python2.7-minimal               2.7.3-0ubuntu3.15

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4151-2

https://ubuntu.com/security/notices/USN-4151-1

CVE-2019-16056, CVE-2019-16935

October 10, 2019

Topics%20covered

Topics Covered

security advisory cross-site scripting remote attack Ubuntu python

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.