Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

Ubuntu 20.04 LTS: USN-4333-2 Addressing Critical Python Vulnerabilities

ubuntu
Calendar Grey April 30, 2020
Dist Ubuntu Esm H88
Ensure your Ubuntu 20.04 LTS is updated to address crucial patches concerning Python flaws that pose risks to system integrity.
Several security issues were fixed in Python.

Summary

Several security issues were fixed in Python.

Software Description:

- python3.8: Interactive high-level object-oriented language (version 3.8)

Details:

USN-4333-1 fixed vulnerabilities in Python. This update provides

the corresponding update for Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that Python incorrectly stripped certain characters from

requests. A remote attacker could use this issue to perform CRLF injection.

(CVE-2019-18348)

It was discovered that Python incorrectly handled certain HTTP requests.

An attacker could possibly use this issue to cause a denial of service.

(CVE-2020-8492)

Topics%20covered

Topics Covered

security advisory DoS Ubuntu CRLF injection Python python3.8

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  python3.8                       3.8.2-1ubuntu1.1
  python3.8-minimal               3.8.2-1ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4333-2

https://ubuntu.com/security/notices/USN-4333-1

CVE-2019-18348, CVE-2020-8492

Severity
critical
Lowest
Low
Medium
High
Critical

April 30, 2020

Topics%20covered

Topics Covered

security advisory DoS Ubuntu CRLF injection Python python3.8

Package Information

https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.