USN-7218-1: Python vulnerability
Published Jan 20, 2025
·Updated
It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack.
Affected Software
8 affected componentsFixes available
All of the following
ubuntu/python3.10<3.10.12-1~22.04.8
3.10.12-1~22.04.8
Ubuntu Ubuntu=22.04
All of the following
ubuntu/python3.10-minimal<3.10.12-1~22.04.8
3.10.12-1~22.04.8
Ubuntu Ubuntu=22.04
All of the following
ubuntu/python3.8<3.8.10-0ubuntu1~20.04.14
3.8.10-0ubuntu1~20.04.14
Ubuntu Ubuntu=20.04
All of the following
ubuntu/python3.8-minimal<3.8.10-0ubuntu1~20.04.14
3.8.10-0ubuntu1~20.04.14
Ubuntu Ubuntu=20.04
Event History
Jan 20, 2025
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-7218-1?
The severity of USN-7218-1 is classified as potentially critical due to the risk of SSRF attacks.
2
How do I fix USN-7218-1?
To fix USN-7218-1, update Python to versions 3.10.12-1~22.04.8 for Ubuntu 22.04 or 3.8.10-0ubuntu1~20.04.14 for Ubuntu 20.04.
3
Which systems are affected by USN-7218-1?
USN-7218-1 affects Ubuntu versions 20.04 and 22.04 running Python 3.10 and Python 3.8.
4
What type of vulnerability is USN-7218-1?
USN-7218-1 is a Server-Side Request Forgery (SSRF) vulnerability that can be exploited by remote attackers.
5
How can I verify if my system is vulnerable to USN-7218-1?
To verify if your system is vulnerable to USN-7218-1, check the installed version of Python against the affected versions listed in the advisory.