==========================================================================
\nUbuntu Security Notice USN-6354-1
\nSeptember 07, 2023<\/p>\n
python2.7, python3.5 vulnerability
\n==========================================================================<\/p>\n
A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 18.04 LTS (Available with Ubuntu Pro)
\n– Ubuntu 16.04 LTS (Available with Ubuntu Pro)
\n– Ubuntu 14.04 LTS (Available with Ubuntu Pro)<\/p>\n
Summary:<\/p>\n
Python could be made to crash or leak sensitive information if it
\nreceived specially crafted input.<\/p>\n
Software Description:
\n– python2.7: An interactive high-level object-oriented language
\n– python3.5: An interactive high-level object-oriented language<\/p>\n
Details:<\/p>\n
It was discovered that Python did not properly handle XML entity
\ndeclarations in plist files. An attacker could possibly use this
\nvulnerability to perform an XML External Entity (XXE) injection,
\nresulting in a denial of service or information disclosure.<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
\npackage versions:<\/p>\n
Ubuntu 18.04 LTS (Available with Ubuntu Pro):
\nlibpython2.7 2.7.17-1~18.04ubuntu1.13+esm1
\nlibpython2.7-stdlib 2.7.17-1~18.04ubuntu1.13+esm1
\npython2.7 2.7.17-1~18.04ubuntu1.13+esm1
\npython2.7-minimal 2.7.17-1~18.04ubuntu1.13+esm1<\/p>\n
Ubuntu 16.04 LTS (Available with Ubuntu Pro):
\nlibpython2.7 2.7.12-1ubuntu0~16.04.18+esm6
\nlibpython2.7-stdlib 2.7.12-1ubuntu0~16.04.18+esm6
\nlibpython3.5 3.5.2-2ubuntu0~16.04.13+esm9
\nlibpython3.5-stdlib 3.5.2-2ubuntu0~16.04.13+esm9
\npython2.7 2.7.12-1ubuntu0~16.04.18+esm6
\npython2.7-minimal 2.7.12-1ubuntu0~16.04.18+esm6
\npython3.5 3.5.2-2ubuntu0~16.04.13+esm9
\npython3.5-minimal 3.5.2-2ubuntu0~16.04.13+esm9<\/p>\n
Ubuntu 14.04 LTS (Available with Ubuntu Pro):
\nlibpython2.7 2.7.6-8ubuntu0.6+esm16
\nlibpython2.7-stdlib 2.7.6-8ubuntu0.6+esm16
\npython2.7 2.7.6-8ubuntu0.6+esm16
\npython2.7-minimal 2.7.6-8ubuntu0.6+esm16<\/p>\n
In general, a standard system update will make all the necessary changes.<\/p>\n
References:
\nhttps:\/\/ubuntu.com\/security\/notices\/USN-6354-1
\nCVE-2022-48565<\/p>\n","protected":false},"excerpt":{"rendered":"
========================================================================== Ubuntu Security Notice USN-6354-1 September 07, 2023 python2.7, python3.5 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 18.04 LTS (Available with Ubuntu Pro) – Ubuntu 16.04 LTS (Available with Ubuntu Pro) – Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: Python could be made to crash or …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-48086","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/48086","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=48086"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/48086\/revisions"}],"predecessor-version":[{"id":48326,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/48086\/revisions\/48326"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=48086"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=48086"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=48086"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}