You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa python2.7

Sigurnosni nedostatak programskog paketa python2.7

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LUB

==========================================================================
Ubuntu Security Notice USN-3496-1
November 28, 2017

python2.7 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 17.04
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

Python could be made to run arbitrary code.

Software Description:
– python2.7: An interactive high-level object-oriented language

Details:

It was discovered that Python incorrectly handled decoding certain
strings. An attacker could possibly use this issue to execute arbitrary
code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  python2.7                       2.7.13-2ubuntu0.1
  python2.7-minimal               2.7.13-2ubuntu0.1

Ubuntu 16.04 LTS:
  python2.7                       2.7.12-1ubuntu0~16.04.2
  python2.7-minimal               2.7.12-1ubuntu0~16.04.2

Ubuntu 14.04 LTS:
  python2.7                       2.7.6-8ubuntu0.4
  python2.7-minimal               2.7.6-8ubuntu0.4

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3496-1
  CVE-2017-1000158

Package Information:
  https://launchpad.net/ubuntu/+source/python2.7/2.7.13-2ubuntu0.1
  https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.
2
  https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.4
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=CIf+
—–END PGP SIGNATURE—–

ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

==========================================================================
Ubuntu Security Notice USN-3496-2
November 28, 2017

python2.7 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 12.04 ESM

Summary:

Python could be made to run arbitrary code.

Software Description:
– python2.7: An interactive high-level object-oriented language

Details:

USN-3496-1 fixed a vulnerability in Python. This update provides
the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 It was discovered that Python incorrectly handled decoding certain
 strings. An attacker could possibly use this issue to execute
arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  python2.7                       2.7.3-0ubuntu3.10
  python2.7-minimal               2.7.3-0ubuntu3.10

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3496-2
  https://www.ubuntu.com/usn/usn-3496-1
  CVE-2017-1000158
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=oXxs
—–END PGP SIGNATURE—–

ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

==========================================================================
Ubuntu Security Notice USN-3496-3
November 28, 2017

python3.4, python3.5 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 17.04
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

Python could be made to run arbitrary code.

Software Description:
– python3.5: An interactive high-level object-oriented language
– python3.4: An interactive high-level object-oriented language

Details:

USN-3496-1 fixed a vulnerability in Python2.7. This update provides
the corresponding update for versions 3.4 and 3.5.

Original advisory details:

 It was discovered that Python incorrectly handled decoding certain
 strings. An attacker could possibly use this issue to execute
 arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  python3.5                       3.5.3-1ubuntu0~17.04.2
  python3.5-minimal               3.5.3-1ubuntu0~17.04.2

Ubuntu 16.04 LTS:
  python3.5                       3.5.2-2ubuntu0~16.04.4
  python3.5-minimal               3.5.2-2ubuntu0~16.04.4

Ubuntu 14.04 LTS:
  python3.4                       3.4.3-1ubuntu1~14.04.6
  python3.4-minimal               3.4.3-1ubuntu1~14.04.6

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3496-3
  https://www.ubuntu.com/usn/usn-3496-1
  CVE-2017-1000158

Package Information:
  https://launchpad.net/ubuntu/+source/python3.5/3.5.3-1ubuntu0~17.04.2
  https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.4
  https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.6
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=tD2P
—–END PGP SIGNATURE—–

AutorVlatka Misic
Cert idNCERT-REF-2017-11-0180-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa cacti

Otkriveni su sigurnosni nedostaci u programskom paketu cacti za operacijski sustav Fedora. Otkriveni nedostaci potencijalnim napadačima omogućuju izvršavanje proizvoljnog programskog...

Close