drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zwei Probleme in Python (Aktualisierung)
Name: |
Zwei Probleme in Python (Aktualisierung) |
|
ID: |
USN-4754-2 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 14.04 ESM |
|
Datum: |
Fr, 26. Februar 2021, 00:08 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3177
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27619 |
|
Applikationen: |
Python |
|
Update von: |
Zwei Probleme in Python |
|
Originalnachricht |
--===============5383936275425267629== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="+HP7ph2BbKc20aGI" Content-Disposition: inline
--+HP7ph2BbKc20aGI Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
========================================================================== Ubuntu Security Notice USN-4754-2 February 25, 2021
python2.7 regression ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 ESM
Summary:
USN-4754-1 introduced a regression in Python2.7.
Software Description: - python2.7: An interactive high-level object-oriented language
Details:
USN-4754-1 fixed a vulnerability in Python. The fix for CVE-2021-3177 introduced a regression in Python 2.7. This update reverts the security fix pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04 LTS: python2.7 2.7.17-1~18.04ubuntu1.5 python2.7-minimal 2.7.17-1~18.04ubuntu1.5
Ubuntu 16.04 LTS: python2.7 2.7.12-1ubuntu0~16.04.16 python2.7-minimal 2.7.12-1ubuntu0~16.04.16
Ubuntu 14.04 ESM: python2.7 2.7.6-8ubuntu0.6+esm9 python2.7-minimal 2.7.6-8ubuntu0.6+esm9
In general, a standard system update will make all the necessary changes.
References: https://usn.ubuntu.com/4754-2 https://usn.ubuntu.com/4754-1 https://launchpad.net/bugs/1916893
Package Information: https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.5 https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.16
--+HP7ph2BbKc20aGI Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEEf+ebRFcoyOoAQoOeRbznW4QLH2kFAmA3/c0ACgkQRbznW4QL H2l+QQ/7BjZcbZGkluwjMoRDI5c/m1gIQ7QZ5biECnzy6yYOyWw3r7hhqneuyUY3 DEPF5pcpPnfBX6cnHzkK9fmL1h8Ivkvjy9HAXqzfjBChHsA/fxh9Te3PuWEozBIz vwZFpYkZEATAstyoG9k5YNEoKNVTGuYqYK/CXqZaVew4kwajClPo/E/+yFw2BaWN WfeDXgPwXYR4PI7KX/wBl/na1RbEpkUDzsaMvLs1aOPYxuLsXyyVO58WPVONmP9T 7u08b23WOO1FqjLYWPMLo29sfOBPEgzurg+Xdrc2jE0rjLtb24LWH4ehh7aoKPIi gsrLhZtOj0IWKWJVYa2RfeKEc5dXEDiaKjHR2tYlhuLyFIlieiFQbY+zW8g/7nqT Bws7NUo3ffA0OLImVBgKPZoyRhREosRxdN+jOspilfAsBwB9g3lOVKuw8air/N4t QHaTKc6kcFt6h0ghl8AZswljzgD3Q/h1kZKE7HosL4CRPUKMN7xwzaYjD1kqPCqQ znwMc2d3DX0+s5aOfoXQPF0ayox4hOFZMmbh1c34mxmy1CCyuFgCFiE/kdOE35IH v2Ze7YzP2IQQHxjASnODZ/B/EznXjRmUJkI8fq1m6lYRGvs4nJtQGvmU5GcXQkjD nx9rXG0PifENUJHW4Z8LHbJ83r8E6sDuIQpuctPkxQt8uvK6AII= =4JXE -----END PGP SIGNATURE-----
--+HP7ph2BbKc20aGI--
--===============5383936275425267629== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
|
|
|
|