Summary
USN-3496-1 fixed a vulnerability in Python2.7. This update provides
the corresponding update for versions 3.4 and 3.5.
Original advisory details:
It was discovered that Python incorrectly handled decoding certain strings.
An attacker could possibly use this issue to execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | python3.4 | 3.4.3-1ubuntu1~14.04.6 |
| Ubuntu · 16.04 LTS 16.04:LTS | python3.5 | 3.5.2-2ubuntu0~16.04.4 |
Vulnerabilities 1
-
Unscored —
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringo…
References
-
report
https://ubuntu.com/security/CVE-2017-1000158