Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Ubuntu 18.04 LTS Python2.7 Important Regression Fix USN-7015-7

ubuntu
Calendar Grey September 29, 2025
Scroller Ubuntu
Ubuntu Security Notice USN-7015-7 addressing critical regression issues in python2.7 for Ubuntu 16.04 and 18.04 LTS.
USN-7015-4 introduced a regression in Python 2.7

Summary

USN-7015-4 introduced a regression in Python 2.7

Software Description:

- python2.7: An interactive high-level object-oriented language

Details:

USN-7015-4 fixed vulnerabilities in Python. It was discovered that the fix

for CVE-2023-27043 for python2.7 was incorrectly applied on Ubuntu 16.04

LTS and Ubuntu 18.04 LTS. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that the Python email module incorrectly parsed email

addresses that contain special characters. A remote attacker could

possibly use this issue to bypass certain protection mechanisms.

(CVE-2023-27043)

It was discovered that Python allowed excessive backtracking while parsing

certain tarfile headers. A remote attacker could possibly use this issue

to cause Python to consume resources, leading to a denial of service.

(CVE-2024-6232)

It was discovered that the Python email module incorrectly quoted newlines

for email headers. A remote attacker...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
  libpython2.7                    2.7.17-1~18.04ubuntu1.13+esm13
                                  Available with Ubuntu Pro
  python2.7                       2.7.17-1~18.04ubuntu1.13+esm13
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libpython2.7                    2.7.12-1ubuntu0~16.04.18+esm18
                                  Available with Ubuntu Pro
  python2.7                       2.7.12-1ubuntu0~16.04.18+esm18
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7015-7

https://ubuntu.com/security/notices/USN-7015-6

https://ubuntu.com/security/notices/USN-7015-5

https://ubuntu.com/security/notices/USN-7015-4

https://ubuntu.com/security/notices/USN-7015-3

https://ubuntu.com/security/notices/USN-7015-2

https://ubuntu.com/security/notices/USN-7015-1

CVE-2023-27043, https://bugs.launchpad.net/ubuntu/+source/python2.7/+bug/2125702

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7015-7

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.