Stay Secure with the Latest Linux Advisories

security advisorycriticalubuntu

Ubuntu 16.04 ESM USN-5629-1 Critical: Python Server Traffic Redirect

Python could be made to redirect web traffic if its http.server received a specially crafted request.. =========================================================================Ubuntu Security Notice USN-5629-1 September 22, 2022 python3.5 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM Summary: Python could be made to redirect web traffic if its http.server received a specially crafted request. Software Description: - python3.5: An interactive high-level object-oriented language Details: It was discovered that the Python http.server module incorrectly handled certain URIs. An attacker could potentially use this to redirect web traffic. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: libpython3.5 3.5.2-2ubuntu0~16.04.13+esm5 libpython3.5-minimal 3.5.2-2ubuntu0~16.04.13+esm5 libpython3.5-stdlib 3.5.2-2ubuntu0~16.04.13+esm5 python3.5 3.5.2-2ubuntu0~16.04.13+esm5 python3.5-minimal 3.5.2-2ubuntu0~16.04.13+esm5 After a standard system update you need to restart the python3 http.server to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5629-1 CVE-2021-28861 . The Ubuntu Security Notice USN-5630-1 underscores a python3.8 flaw that could result in unintentional data exposure.. Python Server Security, Ubuntu Security Update, Web Traffic Redirection. . Severity: Critical. LinuxSecurity.com Team

Sep 22, 2022 •Critical Ubuntu