Summary
It was discovered that Python incorrectly stripped certain characters from
requests. A remote attacker could use this issue to perform CRLF injection.
(CVE-2019-18348)
It was discovered that Python incorrectly handled certain HTTP requests.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2020-8492)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | python2.7 | 2.7.12-1ubuntu0~16.04.11 |
| Ubuntu · 16.04 LTS 16.04:LTS | python3.5 | 3.5.2-2ubuntu0~16.04.10 |
| Ubuntu · 18.04 LTS 18.04:LTS | python2.7 | 2.7.17-1~18.04ubuntu1 |
| Ubuntu · 18.04 LTS 18.04:LTS | python3.6 | 3.6.9-1~18.04ubuntu1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | python2.7 | 2.7.6-8ubuntu0.6+esm5 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | python3.4 | 3.4.3-1ubuntu1~14.04.7+esm6 |
Vulnerabilities 2
-
Medium 6.5
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HT…
-
Medium 5.4
An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection …