USN-4333-2: Python vulnerabilities

Published Apr 30, 2020

Updated

USN-4333-1 fixed vulnerabilities in Python. This update provides the corresponding update for Ubuntu 20.04 LTS. Original advisory details: It was discovered that Python incorrectly stripped certain characters from requests. A remote attacker could use this issue to perform CRLF injection. (CVE-2019-18348) It was discovered that Python incorrectly handled certain HTTP requests. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-8492)

Affected Software

1 affected component

Python Software Foundation Python

Event History

May 10, 2025

Advisory Published

via Ubuntu·04:13 AM

Data Sourced

via Ubuntu·04:13 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What are the vulnerabilities fixed by USN-4333-2?

USN-4333-2 fixed the following vulnerabilities: CVE-2019-18348, CVE-2020-8492

What is the severity of the vulnerabilities?

The severity of the vulnerabilities is not mentioned in the provided information.

Which version of Python is affected by the vulnerabilities?

The vulnerabilities affect Python version 3.8.2-1ubuntu1.1.

How can I fix the vulnerabilities?

To fix the vulnerabilities, update Python to version 3.8.2-1ubuntu1.1.