Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 530
Alerts This Week
Warning Icon 1 530

Ubuntu 14.04 ESM: USN-4754-5 Moderate: Python Denial Of Service

ubuntu
Calendar Grey February 8, 2022
Dist Ubuntu Esm H88
Ubuntu Security Notification USN-4754-5 outlines significant vulnerabilities in Python that impact several versions. Prompt action is advised to ensure system safety!
Python could be made to execute arbitrary code or denial of service if it received a specially crafted input.

Summary

Python could be made to execute arbitrary code or denial of service if it

received a specially crafted input.

Software Description:

- python2.7: An interactive high-level object-oriented language

Details:

USN-4754-1 fixed vulnerabilities in Python. Because of a regression, a

subsequent update removed the fix for CVE-2021-3177. This update reinstates

the security fix for CVE-2021-3177 in Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that Python incorrectly handled certain inputs.

An attacker could possibly use this issue to execute arbitrary code

or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  python2.7                       2.7.6-8ubuntu0.6+esm10
  python2.7-minimal               2.7.6-8ubuntu0.6+esm10

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4754-5

https://ubuntu.com/security/notices/USN-4754-1

CVE-2021-3177

February 08, 2022

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.