Bug 57915 - python3.11: Multiple issues (5.2)
Summary: python3.11: Multiple issues (5.2)
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: Security updates
Version: UCS 5.2
Hardware: All Linux
: P3 normal
Target Milestone: UCS 5.2-0-errata
Assignee: Quality Assurance
QA Contact: Dirk Wiesenthal
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-01-30 16:50 CET by Quality Assurance
Modified: 2025-02-05 15:53 CET (History)
0 users

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID:
Max CVSS v3 score: 6.8 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Quality Assurance univentionstaff 2025-01-30 16:50:28 CET
New Debian python3.11 3.11.2-6+deb12u5 fixes:
This update addresses the following issues:
* python: Parsing errors in email/_parseaddr.py lead to incorrect value in  email address part of tuple (CVE-2023-27043)
* cpython: python: email module doesn't properly quotes newlines in email  headers, allowing header injection (CVE-2024-6923)
* cpython: python: Uncontrolled CPU resource consumption when in http.cookies  module (CVE-2024-7592)
* python: Virtual environment (venv) activation scripts don't quote paths  (CVE-2024-9287)
* python: Improper validation of IPv6 and IPvFuture addresses  (CVE-2024-11168)
Comment 1 Quality Assurance univentionstaff 2025-01-30 17:00:22 CET
--- mirror/ftp/pool/main/p/python3.11/python3.11_3.11.2-6+deb12u4.dsc
+++ apt/ucs_5.2-0-errata5.2-0/source/python3.11_3.11.2-6+deb12u5.dsc
@@ -1,3 +1,13 @@
+3.11.2-6+deb12u5 [Sat, 30 Nov 2024 23:22:50 +0200] Adrian Bunk <bunk@debian.org>:
+
+  * Non-maintainer upload.
+  * CVE-2023-27043: Reject malformed addresses in email.parseaddr()
+    (Closes: #1059298)
+  * CVE-2024-6923: Encode newlines in headers in the email module
+  * CVE-2024-7592: Quadratic complexity parsing cookies with backslashes
+  * CVE-2024-9287: venv activation scripts did't quote paths
+  * CVE-2024-11168: urllib functions improperly validated bracketed hosts
+
 3.11.2-6+deb12u4 [Sat, 14 Sep 2024 00:00:30 -0300] Santiago Ruano Rincón <santiagorr@riseup.net>:
 
   * Fix zipfile.Path regression introduced by 3.11.2-6+deb12u3

<http://piuparts.knut.univention.de/5.2-0/#7114223992240299507>
Comment 2 Iván.Delgado univentionstaff 2025-02-03 13:08:19 CET
OK: bug
OK: yaml
OK: announce_errata
OK: patch
~OK: piuparts
  Some files after purge disapeared

[5.2-0] 6af7efeae2 Bug #57915: python3.11 3.11.2-6+deb12u5
 doc/errata/staging/python3.11.yaml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
Comment 3 Iván.Delgado univentionstaff 2025-02-05 15:53:50 CET
<https://errata.software-univention.de/#/?erratum=5.2x16>