USN-4973-1: Python vulnerability
It was discovered that the Python stdlib ipaddress API incorrectly handled octal strings. A remote attacker could possibly use this issue to perform a wide variety of attacks, including bypassing certain access restrictions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/python3.8-minimalto a version that resolves this vulnerability.Fixed in 3.8.6-1ubuntu0.3 - Upgrade
Upgrade
ubuntu/python3.8to a version that resolves this vulnerability.Fixed in 3.8.6-1ubuntu0.3 - Upgrade
Upgrade
ubuntu/python3.8-minimalto a version that resolves this vulnerability.Fixed in 3.8.5-1~20.04.3 - Upgrade
Upgrade
ubuntu/python3.8to a version that resolves this vulnerability.Fixed in 3.8.5-1~20.04.3
Event History
Frequently Asked Questions
What is the severity of USN-4973-1?
USN-4973-1 has a high severity rating due to potential remote code execution risks.
How do I fix USN-4973-1?
To fix USN-4973-1, upgrade to the patched version of Python 3.8 specified in the advisory.
Which versions of Ubuntu are affected by USN-4973-1?
USN-4973-1 affects Ubuntu versions 20.04 and 20.10 with specific Python 3.8 packages.
What impact can USN-4973-1 have on my system?
USN-4973-1 can allow attackers to bypass access restrictions, potentially leading to unauthorized actions.
Is there a workaround for USN-4973-1 while waiting for a fix?
Currently, the best approach is to upgrade to the fixed version since there is no recommended workaround.