USN-6547-1: Python vulnerability
it was discovered that Python incorrectly handled null bytes when normalizing pathnames. An attacker could possibly use this issue to bypass certain filename checks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/python3.11to a version that resolves this vulnerability.Fixed in 3.11.4-1~23.04.2
Event History
Frequently Asked Questions
What is the severity of USN-6547-1?
The severity of USN-6547-1 is classified as a potential security risk due to improper handling of null bytes in Python path normalization.
How can I fix USN-6547-1?
To resolve the issue described in USN-6547-1, upgrade Python to version 3.11.4-1~23.04.2 or later.
What systems are affected by USN-6547-1?
USN-6547-1 affects Ubuntu 23.04 systems running Python 3.11 versions prior to 3.11.4-1~23.04.2.
What vulnerability does USN-6547-1 address?
USN-6547-1 addresses a vulnerability where attackers could bypass filename checks due to null byte handling in Python.
When was USN-6547-1 released?
USN-6547-1 was released as part of a security advisory to address specific vulnerabilities in Python.