[USN-6941-1] Python vulnerability

[Marc Deslauriers]

==========================================================================
Ubuntu Security Notice USN-6941-1
August 01, 2024

python3.12 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

Python could allow unintended access to network services.

Software Description:
- python3.12: An interactive high-level object-oriented language

Details:

It was discovered that the Python ipaddress module contained incorrect
information about which IP address ranges were considered “private” or
“globally reachable”. This could possibly result in applications applying
incorrect security policies.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   python3.12                      3.12.3-1ubuntu0.1
   python3.12-minimal              3.12.3-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-6941-1
   CVE-2024-4032

Package Information:
   https://launchpad.net/ubuntu/+source/python3.12/3.12.3-1ubuntu0.1

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20240801/c93737ef/attachment.sig>