Summary
It was discovered that Python incorrectly handled expanding environment
variables in os.path.expandvars() when the input was user-controlled. An
attacker could possibly use this issue to cause Python to consume
resources, leading to a denial of service. (CVE-2025-6075)
It was discovered that Python incorrectly handled certain malformed
HTML-like markup in the HTMLParser module, raising an uncaught exception.
A remote attacker could possibly use this issue to cause applications that
parse untrusted input to crash, resulting in a denial of service.
(CVE-2025-69534)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | python2.7 | 2.7.12-1ubuntu0~16.04.18+esm21 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm24 |
Vulnerabilities 2
-
High 7.5
Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParse…
-
Low 1.8
Quadratic complexity in os.path.expandvars() with user-controlled template
If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.