USN-6547-1: Python vulnerability
Published Dec 11, 2023
·Updated
it was discovered that Python incorrectly handled null bytes when normalizing pathnames. An attacker could possibly use this issue to bypass certain filename checks.
Affected Software
2 affected componentsFixes available
All of the following
ubuntu/python3.11<3.11.4-1~23.04.2
3.11.4-1~23.04.2
Ubuntu Ubuntu=23.04
Event History
Dec 11, 2023
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6547-1?
The severity of USN-6547-1 is classified as a potential security risk due to improper handling of null bytes in Python path normalization.
2
How can I fix USN-6547-1?
To resolve the issue described in USN-6547-1, upgrade Python to version 3.11.4-1~23.04.2 or later.
3
What systems are affected by USN-6547-1?
USN-6547-1 affects Ubuntu 23.04 systems running Python 3.11 versions prior to 3.11.4-1~23.04.2.
4
What vulnerability does USN-6547-1 address?
USN-6547-1 addresses a vulnerability where attackers could bypass filename checks due to null byte handling in Python.
5
When was USN-6547-1 released?
USN-6547-1 was released as part of a security advisory to address specific vulnerabilities in Python.