USN-6547-1: Python vulnerability
11 December 2023
Python could be made to bypass security measures if it processed a malicious filename.
Releases
Packages
- python3.11 - An interactive high-level object-oriented language
Details
it was discovered that Python incorrectly handled null bytes when
normalizing pathnames. An attacker could possibly use this issue to bypass
certain filename checks.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 23.04
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-6891-1: python3.6-dev, libpython3.5-minimal, python3.10-dev, libpython3.8-dev, python3.11-dev, python3.8-examples, idle-python3.10, libpython3.11, libpython3.11-dev, idle-python3.9, libpython3.6-minimal, python3.5-dev, python3.10-minimal, python3.12-doc, libpython3.9-stdlib, python3.5, idle-python3.11, libpython3.11-stdlib, python3.9-doc, python3.11-venv, python3.12, libpython3.12-dev, python3.8-doc, python3.12-nopie, python3.6-doc, libpython3.5, python3.10-doc, libpython3.5-testsuite, python3.9-venv, libpython3.10-testsuite, python3.11-minimal, python3.5-venv, python3.10-examples, libpython3.7-stdlib, libpython3.9-minimal, libpython3.12-minimal, python3.9, libpython3.11-testsuite, libpython3.7-testsuite, libpython3.9-testsuite, idle-python3.8, libpython3.11-minimal, libpython3.9-dev, python3.5-minimal, libpython3.6-stdlib, python3.7-venv, python3.12-examples, python3.7-dev, idle-python3.12, libpython3.7, idle-python3.7, python3.7-doc, python3.9-minimal, libpython3.7-minimal, libpython3.6-dev, python3.8-venv, python3.7, libpython3.6-testsuite, libpython3.5-stdlib, libpython3.6, python3.7-minimal, libpython3.10-stdlib, python3.10-venv, python3.8-dev, libpython3.8, python3.8-full, python3.12-dev, libpython3.12-stdlib, python3.6-examples, idle-python3.5, libpython3.8-testsuite, python3.11, python3.12-full, python3.5-doc, libpython3.8-minimal, python3.8-minimal, python3.8, libpython3.10-dev, python3.7-examples, python3.9-dev, libpython3.8-stdlib, libpython3.10-minimal, python3.10-full, idle-python3.6, python3.12-venv, python3.9-examples, libpython3.7-dev, libpython3.5-dev, python3.6-minimal, libpython3.12, libpython3.10, python3.6, python3.11-doc, libpython3.12-testsuite, python3.6-venv, python3.11-full, python3.11-nopie, python3.5-examples, libpython3.9, python3.12-minimal, python3.10, python3.9-full, python3.11-examples, python3.10-nopie