USN-4754-1: Python vulnerabilities

Reference Links

• https://ubuntu.com/security/CVE-2021-3177
• https://ubuntu.com/security/CVE-2020-27619
• https://ubuntu.com/security/notices/USN-4754-4
• https://ubuntu.com/security/notices/USN-4754-3
• https://ubuntu.com/security/notices/USN-4754-5
• https://ubuntu.com/security/notices/USN-6891-1
• https://launchpad.net/ubuntu/+source/python3.8/3.8.6-1ubuntu0.2
• https://launchpad.net/ubuntu/+source/python3.8/3.8.5-1~20.04.2
• https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.3
• https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.4
• https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.14
• https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.13
• https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm8
• https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm10
• https://ubuntu.com/security/notices/USN-4754-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2021-3177
• CVE-2020-27619

Frequently Asked Questions

• What is the vulnerability ID for this Python vulnerability?

  The vulnerability ID for this Python vulnerability is CVE-2020-27619 and CVE-2021-3177.

• What is the severity of USN-4754-1?

  The severity of USN-4754-1 is not specified in the provided information.

• How can an attacker exploit this vulnerability?

  An attacker could exploit this vulnerability by executing arbitrary code or causing a denial of service.

• Which versions of Python are affected by this vulnerability?

  The versions of Python affected by this vulnerability include 3.8.6-1ubuntu0.2, 3.8.5-1~20.04.2, 2.7.17-1~18.04ubuntu1.3, 3.6.9-1~18.04ubuntu1.4, 2.7.12-1ubuntu0~16.04.14, 3.5.2-2ubuntu0~16.04.13, 2.7.6-8ubuntu0.6+esm8, and 3.4.3-1ubuntu1~14.04.7+esm10.

• How can I fix the Python vulnerabilities?

  To fix the Python vulnerabilities, update to the recommended versions mentioned in the vulnerability details.