USN-5821-2 — wheel vulnerability

Summary

USN-5821-1 fixed a vulnerability in wheel. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:

Sebastian Chnelik discovered that wheel incorrectly handled
certain file names when validated against a regex expression.
An attacker could possibly use this issue to cause a
denial of service.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	wheel	0.29.0-1ubuntu0.1~esm1

Vulnerabilities 1

High 7.5

CVE-2022-40898

pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

python-pip python-wheel wheel wheel Debian Ubuntu Azure Linux PyPI

Dec 22, 2022

References

report
https://ubuntu.com/security/CVE-2022-40898

wheel vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

References