USN-6906-1: python-zipp vulnerability
Published Jul 24, 2024
·Updated
It was discovered that python-zipp did not properly handle the zip files with malformed names. An attacker could possibly use this issue to cause a denial of service.
Affected Software
10 affected componentsFixes available
All of the following
ubuntu/python3-zipp<1.0.0-6ubuntu0.1
1.0.0-6ubuntu0.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/python3-zipp<1.0.0-3ubuntu0.1
1.0.0-3ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/pypy-zipp<1.0.0-1ubuntu0.1
1.0.0-1ubuntu0.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/python-zipp<1.0.0-1ubuntu0.1
1.0.0-1ubuntu0.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/python3-zipp<1.0.0-1ubuntu0.1
1.0.0-1ubuntu0.1
Ubuntu Ubuntu=20.04
Event History
Jul 24, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6906-1?
The severity of USN-6906-1 is classified as a possible denial of service vulnerability.
2
How do I fix USN-6906-1?
To fix USN-6906-1, upgrade to the recommended versions of python3-zipp or python-zipp as specified in the advisory.
3
Which versions of Ubuntu are affected by USN-6906-1?
USN-6906-1 affects Ubuntu 20.04, 22.04, and 24.04 versions of python-zipp and pypy-zipp.
4
What vulnerability does USN-6906-1 address?
USN-6906-1 addresses a vulnerability in python-zipp that improperly handles zip files with malformed names.
5
Is there a workaround for USN-6906-1?
There is no specific workaround for USN-6906-1; the best action is to apply the available updates.