Univention Bugzilla – Bug 54450
python2.7: Multiple issues (4.4)
Last modified: 2022-02-16 12:23:26 CET
New Debian python2.7 2.7.13-2+deb9u6 fixes: This update addresses the following issues: * stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c (CVE-2021-3177) * ftplib should not use the host from the PASV response (CVE-2021-4189)
--- mirror/ftp/4.4/unmaintained/4.4-8/source/python2.7_2.7.13-2+deb9u5.dsc +++ apt/ucs_4.4-0-errata4.4-8/source/python2.7_2.7.13-2+deb9u6.dsc @@ -1,3 +1,10 @@ +2.7.13-2+deb9u6 [Sun, 06 Feb 2022 21:16:18 +0100] Anton Gladky <gladk@debian.org>: + + * Non-maintainer upload by the LTS Security Team. + * CVE-2021-4189: Make ftplib not trust the PASV response. + * CVE-2021-3177: Replace snprintf with Python unicode + formatting in ctypes param reprs. + 2.7.13-2+deb9u5 [Fri, 16 Apr 2021 16:02:03 +0200] Anton Gladky <gladk@debian.org>: * Non-maintainer upload by the LTS Security Team. <http://piuparts.knut.univention.de/4.4-8/#6102485430685593772>
OK: yaml OK: announce_errata OK: patch ~OK: piuparts /usr/lib/python2.7/**/*.pyc not deleted on purge [4.4-8] 48a9e0899d Bug #54450: python2.7 2.7.13-2+deb9u6 doc/errata/staging/python2.7.yaml | 15 +++++++++++++++ 1 file changed, 15 insertions(+)
<https://errata.software-univention.de/#/?erratum=4.4x1177>