Headline
Ubuntu Security Notice USN-6941-1
Ubuntu Security Notice 6941-1 - It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered âprivateâ or âglobally reachableâ. This could possibly result in applications applying incorrect security policies.
==========================================================================Ubuntu Security Notice USN-6941-1August 01, 2024python3.12 vulnerability==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 24.04 LTSSummary:Python could allow unintended access to network services.Software Description:- python3.12: An interactive high-level object-oriented languageDetails:It was discovered that the Python ipaddress module contained incorrectinformation about which IP address ranges were considered “private” or“globally reachable”. This could possibly result in applications applyingincorrect security policies.Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 24.04 LTS python3.12 3.12.3-1ubuntu0.1 python3.12-minimal 3.12.3-1ubuntu0.1In general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-6941-1 CVE-2024-4032Package Information: https://launchpad.net/ubuntu/+source/python3.12/3.12.3-1ubuntu0.1Related news
Red Hat Security Advisory 2024-7417-03 - An update for python3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.
Red Hat Security Advisory 2024-6030-03 - An update for python3 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Debian Linux Security Advisory 5759-1 - Multiple security issues were discovered in Python, a high-level, interactive, object-oriented language.
Ubuntu Security Notice 6928-1 - It was discovered that the Python ssl module contained a memory race condition when handling the APIs to obtain the CA certificates and certificate store statistics. This could possibly result in applications obtaining wrong results, leading to various SSL issues. It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered "private" or "globally reachable". This could possibly result in applications applying incorrect security policies.
Red Hat Security Advisory 2024-4779-03 - An update for python3 is now available for Red Hat Enterprise Linux 9.
Red Hat Security Advisory 2024-4766-03 - An update for python3 is now available for Red Hat Enterprise Linux 9.