p PatchFirst

USN-7015-6

USN-7015-6 · python2.7 regresssions

This page contains facts from public vulnerability sources. Check the original advisory before updating.

USN-7015-5 fixed vulnerabilities in python2.7. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the Python email module incorrectly parsed email addresses that contain special characters. A remote attacker could possibly use this issue to bypass certain protection mechanisms. (CVE-2023-27043) It was discovered that Python allowed excessive backtracking while parsing certain tarfile headers. A remote attacker could possibly use this issue to cause Python to consume resources, leading to a denial of service. (CVE-2024-6232) It was discovered that the Python email module incorrectly quoted newlines for email headers. A remote attacker could possibly use this issue to perform header injection. (CVE-2024-6923) It was discovered that the Python http.cookies module incorrectly handled parsing cookies that contained backslashes for quoted characters. A remote attacker could possibly use this issue to cause Python to consume resources, leading to a denial of service. (CVE-2024-7592) It was discovered that the Python zipfile module incorrectly handled certain malformed zip files. A remote attacker could possibly use this issue to cause Python to stop responding, resulting in a denial of service. (CVE-2024-8088)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python2.7 Ubuntu:Pro:14.04:LTS

    Versions
    • 2.7.5-8ubuntu3
    • 2.7.5-8ubuntu4
    • 2.7.6-2
    • 2.7.6-2ubuntu1
    • 2.7.6-3
    • 2.7.6-3ubuntu1
    • 2.7.6-4
    • 2.7.6-4ubuntu1
    • 2.7.6-5
    • 2.7.6-7
    • 2.7.6-8
    • 2.7.6-8ubuntu0.2
    • 2.7.6-8ubuntu0.3
    • 2.7.6-8ubuntu0.4
    • 2.7.6-8ubuntu0.5
    • 2.7.6-8ubuntu0.6+esm2
    • 2.7.6-8ubuntu0.6+esm3
    • 2.7.6-8ubuntu0.6+esm5
    • 2.7.6-8ubuntu0.6+esm6
    • 2.7.6-8ubuntu0.6+esm7
    • 2.7.6-8ubuntu0.6+esm8
    • 2.7.6-8ubuntu0.6+esm9
    • 2.7.6-8ubuntu0.6+esm10
    • 2.7.6-8ubuntu0.6+esm11
    • 2.7.6-8ubuntu0.6+esm12
    • 2.7.6-8ubuntu0.6+esm13
    • 2.7.6-8ubuntu0.6+esm14
    • 2.7.6-8ubuntu0.6+esm15
    • 2.7.6-8ubuntu0.6+esm16
    • 2.7.6-8ubuntu0.6+esm17
    • 2.7.6-8ubuntu0.6+esm18
    • 2.7.6-8ubuntu0.6+esm20
    • 2.7.6-8ubuntu0.6+esm21
    Affected ranges
    • ECOSYSTEM: < 2.7.6-8ubuntu0.6+esm22

    Update to 2.7.6-8ubuntu0.6+esm22

  • python2.7 Ubuntu:Pro:16.04:LTS

    Versions
    • 2.7.10-4ubuntu1
    • 2.7.10-4ubuntu2
    • 2.7.11-2
    • 2.7.11-3
    • 2.7.11-4
    • 2.7.11-6
    • 2.7.11-7
    • 2.7.11-7ubuntu1
    • 2.7.12-1~16.04
    • 2.7.12-1ubuntu0~16.04.1
    • 2.7.12-1ubuntu0~16.04.2
    • 2.7.12-1ubuntu0~16.04.3
    • 2.7.12-1ubuntu0~16.04.4
    • 2.7.12-1ubuntu0~16.04.8
    • 2.7.12-1ubuntu0~16.04.9
    • 2.7.12-1ubuntu0~16.04.11
    • 2.7.12-1ubuntu0~16.04.12
    • 2.7.12-1ubuntu0~16.04.13
    • 2.7.12-1ubuntu0~16.04.14
    • 2.7.12-1ubuntu0~16.04.16
    • 2.7.12-1ubuntu0~16.04.18
    • 2.7.12-1ubuntu0~16.04.18+esm1
    • 2.7.12-1ubuntu0~16.04.18+esm2
    • 2.7.12-1ubuntu0~16.04.18+esm3
    • 2.7.12-1ubuntu0~16.04.18+esm4
    • 2.7.12-1ubuntu0~16.04.18+esm5
    • 2.7.12-1ubuntu0~16.04.18+esm6
    • 2.7.12-1ubuntu0~16.04.18+esm7
    • 2.7.12-1ubuntu0~16.04.18+esm8
    • 2.7.12-1ubuntu0~16.04.18+esm9
    • 2.7.12-1ubuntu0~16.04.18+esm10
    • 2.7.12-1ubuntu0~16.04.18+esm11
    • 2.7.12-1ubuntu0~16.04.18+esm12
    Affected ranges
    • ECOSYSTEM: < 2.7.12-1ubuntu0~16.04.18+esm13

    Update to 2.7.12-1ubuntu0~16.04.18+esm13

  • python2.7 Ubuntu:Pro:18.04:LTS

    Versions
    • 2.7.14-2ubuntu2
    • 2.7.14-4
    • 2.7.14-6
    • 2.7.14-7
    • 2.7.14-8
    • 2.7.15~rc1-1
    • 2.7.15~rc1-1ubuntu0.1
    • 2.7.15-4ubuntu4~18.04
    • 2.7.15-4ubuntu4~18.04.1
    • 2.7.15-4ubuntu4~18.04.2
    • 2.7.17-1~18.04
    • 2.7.17-1~18.04ubuntu1
    • 2.7.17-1~18.04ubuntu1.1
    • 2.7.17-1~18.04ubuntu1.2
    • 2.7.17-1~18.04ubuntu1.3
    • 2.7.17-1~18.04ubuntu1.5
    • 2.7.17-1~18.04ubuntu1.6
    • 2.7.17-1~18.04ubuntu1.7
    • 2.7.17-1~18.04ubuntu1.8
    • 2.7.17-1~18.04ubuntu1.10
    • 2.7.17-1~18.04ubuntu1.11
    • 2.7.17-1~18.04ubuntu1.13
    • 2.7.17-1~18.04ubuntu1.13+esm1
    • 2.7.17-1~18.04ubuntu1.13+esm2
    • 2.7.17-1~18.04ubuntu1.13+esm3
    • 2.7.17-1~18.04ubuntu1.13+esm4
    • 2.7.17-1~18.04ubuntu1.13+esm5
    • 2.7.17-1~18.04ubuntu1.13+esm6
    • 2.7.17-1~18.04ubuntu1.13+esm7
    Affected ranges
    • ECOSYSTEM: < 2.7.17-1~18.04ubuntu1.13+esm8

    Update to 2.7.17-1~18.04ubuntu1.13+esm8

  • python2.7 Ubuntu:20.04:LTS

    Versions
    • 2.7.17~rc1-1
    • 2.7.17-1
    • 2.7.17-1ubuntu5
    • 2.7.17-1ubuntu6
    • 2.7.18~rc1-2
    • 2.7.18-1~20.04
    • 2.7.18-1~20.04.1
    • 2.7.18-1~20.04.3
    • 2.7.18-1~20.04.4
    • 2.7.18-1~20.04.5
    Affected ranges
    • ECOSYSTEM: < 2.7.18-1~20.04.6

    Update to 2.7.18-1~20.04.6

  • python2.7 Ubuntu:22.04:LTS

    Versions
    • 2.7.18-8build1
    • 2.7.18-13
    • 2.7.18-13ubuntu1
    • 2.7.18-13ubuntu1.1
    • 2.7.18-13ubuntu1.2
    • 2.7.18-13ubuntu1.3
    Affected ranges
    • ECOSYSTEM: < 2.7.18-13ubuntu1.4

    Update to 2.7.18-13ubuntu1.4

Original sources

Check your server →