High USN-5519-1 1 CVE

python2.7, python3.10, python3.4, python3.5, python3.6, python3.8, python3.9 vulnerability

Published Jul 14, 2022 · Updated Oct 8, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.

Fixed packages 10

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	python2.7	2.7.17-1~18.04ubuntu1.8
Ubuntu · 18.04 LTS 18.04:LTS	python3.6	3.6.9-1~18.04ubuntu1.8
Ubuntu · 20.04 LTS 20.04:LTS	python2.7	2.7.18-1~20.04.3
Ubuntu · 20.04 LTS 20.04:LTS	python3.8	3.8.10-0ubuntu1~20.04.5
Ubuntu · 22.04 LTS 22.04:LTS	python2.7	2.7.18-13ubuntu1.1
Ubuntu · 22.04 LTS 22.04:LTS	python3.10	3.10.4-3ubuntu0.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	python2.7	2.7.6-8ubuntu0.6+esm11
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	python3.4	3.4.3-1ubuntu1~14.04.7+esm13
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	python2.7	2.7.12-1ubuntu0~16.04.18+esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	python3.5	3.5.2-2ubuntu0~16.04.13+esm3

Vulnerabilities 1

High 7.8

CVE-2015-20107 Public exploit

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine

Apr 13, 2022

References

report
https://ubuntu.com/security/CVE-2015-20107