Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 22.04 LTS: USN-6928-1 Critical Python Security Issues

ubuntu
Calendar Grey July 30, 2024
Dist Ubuntu Esm H88
Update patches for Python in Ubuntu versions 20.04 and 22.04 resolve serious vulnerabilities related to SSL protocols and IP address management.
Several security issues were fixed in Python.

Summary

Several security issues were fixed in Python.

Software Description:

- python3.10: An interactive high-level object-oriented language

- python3.8: An interactive high-level object-oriented language

Details:

It was discovered that the Python ssl module contained a memory race

condition when handling the APIs to obtain the CA certificates and

certificate store statistics. This could possibly result in applications

obtaining wrong results, leading to various SSL issues. (CVE-2024-0397)

It was discovered that the Python ipaddress module contained incorrect

information about which IP address ranges were considered "private" or

"globally reachable". This could possibly result in applications applying

incorrect security policies. (CVE-2024-4032)

Topics%20covered

Topics Covered

security advisory update Ubuntu Python ssl issue memory race ipaddress

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
   python3.10                      3.10.12-1~22.04.5
   python3.10-minimal              3.10.12-1~22.04.5

Ubuntu 20.04 LTS
   python3.8                       3.8.10-0ubuntu1~20.04.11
   python3.8-minimal               3.8.10-0ubuntu1~20.04.11

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6928-1

CVE-2024-0397, CVE-2024-4032

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6928-1

Topics%20covered

Topics Covered

security advisory update Ubuntu Python ssl issue memory race ipaddress

Package Information

https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.5
https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.11

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here