USN-4151-1: Python vulnerabilities
It was discovered that Python incorrectly parsed certain email addresses. A remote attacker could possibly use this issue to trick Python applications into accepting email addresses that should be denied. (CVE-2019-16056) It was discovered that the Python documentation XML-RPC server incorrectly handled certain fields. A remote attacker could use this issue to execute a cross-site scripting (XSS) attack. (CVE-2019-16935)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is USN-4151-1.
What is the severity of USN-4151-1?
The severity of USN-4151-1 is not specified.
How does USN-4151-1 impact Python?
USN-4151-1 impacts Python by allowing remote attackers to trick Python applications into accepting email addresses that should be denied.
What is the affected software of USN-4151-1?
The affected software of USN-4151-1 includes Python 2.7.16-2ubuntu0.2, Python 2.7.15-4ubuntu4~18.04.2, Python 3.7.3-2ubuntu0.2, Python 3.6.8-1~18.04.3, Python 2.7.12-1ubuntu0~16.04.9, Python 3.5.2-2ubuntu0~16.04.9 and their corresponding minimal versions.
How can I fix USN-4151-1?
To fix USN-4151-1, you should update the affected Python packages to the specified versions provided by Ubuntu.