USN-4973-1: Python vulnerability
Published Jun 1, 2021
·Updated
It was discovered that the Python stdlib ipaddress API incorrectly handled octal strings. A remote attacker could possibly use this issue to perform a wide variety of attacks, including bypassing certain access restrictions.
Affected Software
8 affected componentsFixes available
All of the following
ubuntu/python3.8-minimal<3.8.6-1ubuntu0.3
3.8.6-1ubuntu0.3
Ubuntu Ubuntu=20.10
All of the following
ubuntu/python3.8<3.8.6-1ubuntu0.3
3.8.6-1ubuntu0.3
Ubuntu Ubuntu=20.10
All of the following
ubuntu/python3.8-minimal<3.8.5-1~20.04.3
3.8.5-1~20.04.3
Ubuntu Ubuntu=20.04
All of the following
ubuntu/python3.8<3.8.5-1~20.04.3
3.8.5-1~20.04.3
Ubuntu Ubuntu=20.04
Event History
Jun 1, 2021
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-4973-1?
USN-4973-1 has a high severity rating due to potential remote code execution risks.
2
How do I fix USN-4973-1?
To fix USN-4973-1, upgrade to the patched version of Python 3.8 specified in the advisory.
3
Which versions of Ubuntu are affected by USN-4973-1?
USN-4973-1 affects Ubuntu versions 20.04 and 20.10 with specific Python 3.8 packages.
4
What impact can USN-4973-1 have on my system?
USN-4973-1 can allow attackers to bypass access restrictions, potentially leading to unauthorized actions.
5
Is there a workaround for USN-4973-1 while waiting for a fix?
Currently, the best approach is to upgrade to the fixed version since there is no recommended workaround.