Release Info

Advisory: CLSA-2021:1635430087

OS: Ubuntu 16.04 ELS

Public date: 2021-10-28 00:00:00

Project: python3.5

Version: 3.5.2-2ubuntu0~16.04.14

Errata link: https://errata.cloudlinux.com/ubuntu16-els/CLSA-2021-1635430087.html

Changelog

* SECURITY UPDATE: Denial of service - debian/patches/CVE-2021-3737-*.patch: Fix http client infinite line reading (DoS) after a HTTP 100 continue in Lib/http/client.py, Lib/test/test_httplib.py. - CVE-2021-3737 * SECURITY UPDATE: Denial of service - debian/patches/CVE-2021-3733.patch: fix a ReDoS in urllib AbstractBasicAuthHandler in Lib/urllib/request.py. - CVE-2021-3733

Update

Packages list

idle-python3.5_3.5.2-2ubuntu0~16.04.14_all.deb libpython3.5_3.5.2-2ubuntu0~16.04.14_amd64.deb libpython3.5-dev_3.5.2-2ubuntu0~16.04.14_amd64.deb libpython3.5-minimal_3.5.2-2ubuntu0~16.04.14_amd64.deb libpython3.5-stdlib_3.5.2-2ubuntu0~16.04.14_amd64.deb libpython3.5-testsuite_3.5.2-2ubuntu0~16.04.14_all.deb python3.5_3.5.2-2ubuntu0~16.04.14_amd64.deb python3.5-dev_3.5.2-2ubuntu0~16.04.14_amd64.deb python3.5-doc_3.5.2-2ubuntu0~16.04.14_all.deb python3.5-examples_3.5.2-2ubuntu0~16.04.14_all.deb python3.5-minimal_3.5.2-2ubuntu0~16.04.14_amd64.deb python3.5-venv_3.5.2-2ubuntu0~16.04.14_amd64.deb

CVEs

CVE-2021-3733
CVE-2021-3737