USN-4754-4

Details

USN-4754-1 fixed vulnerabilities in Python. Because of a regression, a subsequent update removed the fix for CVE-2021-3177. This update reinstates the security fix for CVE-2021-3177.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)

Affected Packages

python2.7

Ubuntu 16.04 LTS

Fixed in:

2.7.12-1ubuntu0~16.04.18

python2.7

Ubuntu 18.04 LTS

Fixed in:

2.7.17-1~18.04ubuntu1.6

References

REPORT

https://ubuntu.com/security/CVE-2021-3177

ADVISORY

https://ubuntu.com/security/notices/USN-4754-4