It was discovered that Python incorrectly handled certain pickle files. An attacker could possibly use this issue to consume memory, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-20406)
It was discovered that Python incorrectly validated the domain when handling cookies. An attacker could possibly trick Python into sending cookies to the wrong domain. (CVE-2018-20852)
Jonathan Birch and Panayiotis Panayiotou discovered that Python incorrectly handled Unicode encoding during NFKC normalization. An attacker could possibly use this issue to obtain sensitive information. (CVE-2019-9636, CVE-2019-10160)
Colin Read and Nicolas Edet discovered that Python incorrectly handled parsing certain X509 certificates. An attacker could possibly use this issue to cause Python to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-5010)
It was discovered that Python incorrectly handled certain urls. A remote attacker could possibly use this issue to perform CRLF injection attacks. (CVE-2019-9740, CVE-2019-9947)
Sihoon Lee discovered that Python incorrectly handled the local_file: scheme. A remote attacker could possibly use this issue to bypass blocklist meschanisms. (CVE-2019-9948)
{ "availability": "No subscription required", "binaries": [ { "libpython2.7-dbg": "2.7.12-1ubuntu0~16.04.8", "libpython2.7-dbgsym": "2.7.12-1ubuntu0~16.04.8", "libpython2.7-stdlib-dbgsym": "2.7.12-1ubuntu0~16.04.8", "python2.7-examples": "2.7.12-1ubuntu0~16.04.8", "libpython2.7-minimal-dbgsym": "2.7.12-1ubuntu0~16.04.8", "python2.7-dbg": "2.7.12-1ubuntu0~16.04.8", "python2.7-dev": "2.7.12-1ubuntu0~16.04.8", "libpython2.7-testsuite": "2.7.12-1ubuntu0~16.04.8", "python2.7-minimal": "2.7.12-1ubuntu0~16.04.8", "libpython2.7-dev-dbgsym": "2.7.12-1ubuntu0~16.04.8", "python2.7": "2.7.12-1ubuntu0~16.04.8", "libpython2.7": "2.7.12-1ubuntu0~16.04.8", "libpython2.7-minimal": "2.7.12-1ubuntu0~16.04.8", "libpython2.7-stdlib": "2.7.12-1ubuntu0~16.04.8", "python2.7-doc": "2.7.12-1ubuntu0~16.04.8", "idle-python2.7": "2.7.12-1ubuntu0~16.04.8", "libpython2.7-dev": "2.7.12-1ubuntu0~16.04.8" } ] }
{ "availability": "No subscription required", "binaries": [ { "python3.5-dev": "3.5.2-2ubuntu0~16.04.8", "libpython3.5-minimal-dbgsym": "3.5.2-2ubuntu0~16.04.8", "libpython3.5-dbgsym": "3.5.2-2ubuntu0~16.04.8", "libpython3.5-dbg": "3.5.2-2ubuntu0~16.04.8", "libpython3.5-minimal": "3.5.2-2ubuntu0~16.04.8", "libpython3.5-stdlib": "3.5.2-2ubuntu0~16.04.8", "libpython3.5": "3.5.2-2ubuntu0~16.04.8", "python3.5-minimal": "3.5.2-2ubuntu0~16.04.8", "idle-python3.5": "3.5.2-2ubuntu0~16.04.8", "python3.5-venv": "3.5.2-2ubuntu0~16.04.8", "python3.5-examples": "3.5.2-2ubuntu0~16.04.8", "python3.5": "3.5.2-2ubuntu0~16.04.8", "libpython3.5-dev": "3.5.2-2ubuntu0~16.04.8", "libpython3.5-stdlib-dbgsym": "3.5.2-2ubuntu0~16.04.8", "python3.5-dbg": "3.5.2-2ubuntu0~16.04.8", "python3.5-doc": "3.5.2-2ubuntu0~16.04.8", "libpython3.5-testsuite": "3.5.2-2ubuntu0~16.04.8", "libpython3.5-dev-dbgsym": "3.5.2-2ubuntu0~16.04.8" } ] }
{ "availability": "No subscription required", "binaries": [ { "python2.7": "2.7.15-4ubuntu4~18.04.1", "libpython2.7": "2.7.15-4ubuntu4~18.04.1", "libpython2.7-dbg": "2.7.15-4ubuntu4~18.04.1", "libpython2.7-stdlib": "2.7.15-4ubuntu4~18.04.1", "python2.7-dev": "2.7.15-4ubuntu4~18.04.1", "python2.7-examples": "2.7.15-4ubuntu4~18.04.1", "python2.7-doc": "2.7.15-4ubuntu4~18.04.1", "python2.7-dbg": "2.7.15-4ubuntu4~18.04.1", "idle-python2.7": "2.7.15-4ubuntu4~18.04.1", "libpython2.7-testsuite": "2.7.15-4ubuntu4~18.04.1", "python2.7-minimal": "2.7.15-4ubuntu4~18.04.1", "libpython2.7-dev": "2.7.15-4ubuntu4~18.04.1", "libpython2.7-minimal": "2.7.15-4ubuntu4~18.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "python3.6-examples": "3.6.8-1~18.04.2", "libpython3.6": "3.6.8-1~18.04.2", "libpython3.6-dbg": "3.6.8-1~18.04.2", "libpython3.6-stdlib": "3.6.8-1~18.04.2", "python3.6-venv": "3.6.8-1~18.04.2", "libpython3.6-minimal": "3.6.8-1~18.04.2", "python3.6-minimal": "3.6.8-1~18.04.2", "idle-python3.6": "3.6.8-1~18.04.2", "python3.6-dbg": "3.6.8-1~18.04.2", "python3.6": "3.6.8-1~18.04.2", "python3.6-dev": "3.6.8-1~18.04.2", "libpython3.6-dev": "3.6.8-1~18.04.2", "python3.6-doc": "3.6.8-1~18.04.2", "libpython3.6-testsuite": "3.6.8-1~18.04.2" } ] }