USN-6941-1: Python vulnerability
It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered “private” or “globally reachable”. This could possibly result in applications applying incorrect security policies.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6941-1?
The severity of USN-6941-1 is moderate due to the potential for incorrect security policies to be applied.
How do I fix USN-6941-1?
To fix USN-6941-1, update Python to version 3.12.3-1ubuntu0.1 on affected Ubuntu systems.
What is the impact of USN-6941-1 on applications?
The impact of USN-6941-1 could lead to applications misclassifying IP address ranges, potentially exposing them to security risks.
Which versions of Ubuntu are affected by USN-6941-1?
Ubuntu 24.04 is affected by USN-6941-1 where Python 3.12 and python3.12-minimal versions are installed prior to the fix.
Is there a specific IP address issue related to USN-6941-1?
Yes, USN-6941-1 addresses an issue with the Python ipaddress module misidentifying private and globally reachable IP address ranges.