USN-6928-1: Python vulnerabilities
It was discovered that the Python ssl module contained a memory race condition when handling the APIs to obtain the CA certificates and certificate store statistics. This could possibly result in applications obtaining wrong results, leading to various SSL issues. (CVE-2024-0397) It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered "private" or "globally reachable". This could possibly result in applications applying incorrect security policies. (CVE-2024-4032)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6928-1?
The severity of USN-6928-1 is classified as moderate due to memory race conditions affecting SSL functionality.
How do I fix USN-6928-1?
To fix USN-6928-1, upgrade to the patched versions 3.10.12-1~22.04.5 for Ubuntu 22.04 or 3.8.10-0ubuntu1~20.04.11 for Ubuntu 20.04.
What systems are affected by USN-6928-1?
USN-6928-1 affects Python 3.10 on Ubuntu 22.04 and Python 3.8 on Ubuntu 20.04.
What are the potential impacts of USN-6928-1?
The potential impacts of USN-6928-1 include incorrect SSL results leading to various security issues in applications.
Is there a workaround for USN-6928-1?
There is currently no known workaround for USN-6928-1; updating to the fixed versions is recommended.