Ubuntu - Python vulnerability (2020-10-14)

USN-4581-1: Python vulnerability

python2.7, python3.4, python3.5, python3.6 vulnerability<br/>A security issue affects these releases of Ubuntu and its derivatives:<br/>Ubuntu 18.04 LTS<br/>Ubuntu 16.04 LTS<br/>Ubuntu 14.04 ESM<br/>Ubuntu 12.04 ESM<br/>Summary<br/>Python could be used to perform a CRLF injection if it received a specially crafted request.<br/>Software Description<br/>python2.7 - An interactive high-level object-oriented language<br/>python3.6 - An interactive high-level object-oriented language<br/>python3.5 - An interactive high-level object-oriented language<br/>python3.4 - An interactive high-level object-oriented language<br/>Details<br/>It was discovered that Python incorrectly handled certain character sequences. A remote attacker could possibly use this issue to perform CRLF injection.<br/>Update instructions<br/>The problem can be corrected by updating your system to the following package versions:<br/>Ubuntu 18.04 LTS<br/>python2.7 - 2.7.17-1~18.04ubuntu1.2<br/>python2.7-minimal - 2.7.17-1~18.04ubuntu1.2<br/>python3.6 - 3.6.9-1~18.04ubuntu1.3<br/>python3.6-minimal - 3.6.9-1~18.04ubuntu1.3<br/>Ubuntu 16.04 LTS<br/>python2.7 - 2.7.12-1ubuntu0~16.04.13<br/>python2.7-minimal - 2.7.12-1ubuntu0~16.04.13<br/>python3.5 - 3.5.2-2ubuntu0~16.04.12<br/>python3.5-minimal - 3.5.2-2ubuntu0~16.04.12<br/>Ubuntu 14.04 ESM<br/>python2.7 - 2.7.6-8ubuntu0.6+esm7<br/>python2.7-minimal - 2.7.6-8ubuntu0.6+esm7<br/>python3.4 - 3.4.3-1ubuntu1~14.04.7+esm8<br/>python3.4-minimal - 3.4.3-1ubuntu1~14.04.7+esm8<br/>Ubuntu 12.04 ESM<br/>python2.7 - 2.7.3-0ubuntu3.19<br/>python2.7-minimal - 2.7.3-0ubuntu3.19<br/>To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.<br/>In general, a standard system update will make all the necessary changes.<br/>References<br/>CVE-2020-26116<br/>]]&gt;

Ubuntu是一个以桌面应用为主的Linux操作系统

<p><a target="_blank" href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26116">CVE-2020-26116</a></p>

暂无

暂无

https://usn.ubuntu.com/4581-1/