USN-7212-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-7212-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7212-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/USN-7212-1

Related

Published

2025-01-16T13:53:32.494179Z

Modified

2025-01-16T13:53:32.494179Z

Summary

python2.7 vulnerabilities

Details

It was discovered that Python incorrectly handled certain ZIP files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2019-9674)

It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into running a specially crafted input, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2022-45061)

It was discovered that Python incorrectly handled certain crafted ZIP files. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2024-0450)

References

Affected packages

Ubuntu:Pro:20.04:LTS / python2.7

Package

Name: python2.7
Purl: pkg:deb/ubuntu/python2.7@2.7.18-1~20.04.7+esm4?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.18-1~20.04.7+esm4

Affected versions

2.*

2.7.17~rc1-1

2.7.17-1

2.7.17-1ubuntu5

2.7.17-1ubuntu6

2.7.18~rc1-2

2.7.18-1~20.04

2.7.18-1~20.04.1

2.7.18-1~20.04.1+esm1

2.7.18-1~20.04.3

2.7.18-1~20.04.3+esm1

2.7.18-1~20.04.4

2.7.18-1~20.04.4+esm1

2.7.18-1~20.04.4+esm2

2.7.18-1~20.04.4+esm3

2.7.18-1~20.04.5

2.7.18-1~20.04.5+esm1

2.7.18-1~20.04.5+esm2

2.7.18-1~20.04.6

2.7.18-1~20.04.6+esm1

2.7.18-1~20.04.7

2.7.18-1~20.04.7+esm3

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "idle-python2.7",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "libpython2.7",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "libpython2.7-dbg",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "libpython2.7-dev",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "libpython2.7-minimal",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "libpython2.7-stdlib",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "libpython2.7-testsuite",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "python2.7",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "python2.7-dbg",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "python2.7-dev",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "python2.7-doc",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "python2.7-examples",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        },
        {
            "binary_name": "python2.7-minimal",
            "binary_version": "2.7.18-1~20.04.7+esm4"
        }
    ]
}

Ubuntu:Pro:22.04:LTS / python2.7

Package

Name: python2.7
Purl: pkg:deb/ubuntu/python2.7@2.7.18-13ubuntu1.5+esm3?arch=source&distro=esm-apps/jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.18-13ubuntu1.5+esm3

Affected versions

2.*

2.7.18-8build1

2.7.18-13

2.7.18-13ubuntu1

2.7.18-13ubuntu1.1

2.7.18-13ubuntu1.1+esm2

2.7.18-13ubuntu1.2

2.7.18-13ubuntu1.2+esm1

2.7.18-13ubuntu1.2+esm2

2.7.18-13ubuntu1.2+esm3

2.7.18-13ubuntu1.3

2.7.18-13ubuntu1.3+esm1

2.7.18-13ubuntu1.4

2.7.18-13ubuntu1.4+esm1

2.7.18-13ubuntu1.5

2.7.18-13ubuntu1.5+esm2

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "idle-python2.7",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "libpython2.7",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "libpython2.7-dbg",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "libpython2.7-dev",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "libpython2.7-minimal",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "libpython2.7-stdlib",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "libpython2.7-testsuite",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "python2.7",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "python2.7-dbg",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "python2.7-dev",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "python2.7-doc",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "python2.7-examples",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        },
        {
            "binary_name": "python2.7-minimal",
            "binary_version": "2.7.18-13ubuntu1.5+esm3"
        }
    ]
}