UBUNTU-CVE-2022-48560

Details

A use-after-free exists in Python through 3.9 via heappushpop in heapq.

Affected Packages(11 packages)

python2.7

Ubuntu 20.04 LTS

Fixed in:

2.7.18-1~20.04.7

python2.7

Ubuntu 22.04 LTS

Fixed in:

2.7.18-13ubuntu1.5

python2.7

Ubuntu Pro 14.04 LTS

Fixed in:

2.7.6-8ubuntu0.6+esm17

python3.4

Ubuntu Pro 14.04 LTS

Affected versions:

3.4.0-13.4.0-2ubuntu13.4.0-2ubuntu1.13.4.3-1ubuntu1~14.04.13.4.3-1ubuntu1~14.04.33.4.3-1ubuntu1~14.04.43.4.3-1ubuntu1~14.04.53.4.3-1ubuntu1~14.04.63.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm10+24 more

python3.5

Ubuntu Pro 14.04 LTS

Fixed in:

3.5.2-2ubuntu0~16.04.4~14.04.1+esm1

python2.7

Ubuntu Pro 16.04 LTS

Fixed in:

2.7.12-1ubuntu0~16.04.18+esm8

python3.5

Ubuntu Pro 16.04 LTS

Fixed in:

3.5.2-2ubuntu0~16.04.13+esm10

python2.7

Ubuntu Pro 18.04 LTS

Fixed in:

2.7.17-1~18.04ubuntu1.13+esm3

python3.6

Ubuntu Pro 18.04 LTS

Fixed in:

3.6.9-1~18.04ubuntu1.13+esm2

python3.7

Ubuntu Pro 18.04 LTS

Fixed in:

3.7.5-2ubuntu1~18.04.2+esm3

References

REPORT

https://bugs.python.org/issue39421

REPORT

https://github.com/python/cpython/commit/79f89e6e5a659846d1068e8b1bd8e491ccdef861

REPORT

https://github.com/python/cpython/commit/958064f8d2b84062b0582bbae911df8ccfc11fd6

REPORT

https://github.com/python/cpython/issues/83602

REPORT

https://ubuntu.com/security/CVE-2022-48560

ADVISORY

https://ubuntu.com/security/notices/USN-6394-1

ADVISORY

https://ubuntu.com/security/notices/USN-6394-2

ADVISORY

https://ubuntu.com/security/notices/USN-6891-1

ADVISORY

https://ubuntu.com/security/notices/USN-7180-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2022-48560