Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 18.04 LTS USN-5931-1 Critical: Python Remote Execution

ubuntu
Calendar Grey March 7, 2023
Scroller Ubuntu
Address various vulnerabilities in Python packages for Ubuntu 18.04 LTS. Ensure updates are applied to mitigate potential remote code execution threats.
Several security issues were fixed in Python.

Summary

Several security issues were fixed in Python.

Software Description:

- python3.8: An interactive high-level object-oriented language

Details:

It was discovered that Python incorrectly handled certain inputs. If a

user or an automated system were tricked into running a specially

crafted input, a remote attacker could possibly use this issue to execute

arbitrary code. (CVE-2022-37454)

Topics%20covered

Topics Covered

security advisory critical software update remote execution ubuntu python

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
   python3.8                       3.8.0-3ubuntu1~18.04.2+esm1
   python3.8-minimal               3.8.0-3ubuntu1~18.04.2+esm1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5931-1

CVE-2022-37454

Severity
critical
Lowest
Low
Medium
High
Critical

March 07, 2023

Topics%20covered

Topics Covered

security advisory critical software update remote execution ubuntu python

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.