Stay Secure with the Latest Linux Advisories

security advisorythreatubuntu

Ubuntu 23.04: USN-6548-1 critical: python3.11 filename bypass

Python could be made to bypass security measures if it processed a malicious filename.. ========================================================================== Ubuntu Security Notice USN-6547-1 December 11, 2023 python3.11 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 Summary: Python could be made to bypass security measures if it processed a malicious filename. Software Description: - python3.11: An interactive high-level object-oriented language Details: it was discovered that Python incorrectly handled null bytes when normalizing pathnames. An attacker could possibly use this issue to bypass certain filename checks. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: python3.11 3.11.4-1~23.04.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6547-1 CVE-2023-41105 Package Information: https://launchpad.net/ubuntu/+source/python3.11/3.11.4-1~23.04.2 . An identified vulnerability in Python on Ubuntu allows circumvention of essential security measures through altered file names. Immediate action is necessary.. Python Security, Filename Check Bypass, Ubuntu Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Dec 11, 2023 •Critical Ubuntu