CVE-2013-1752

Rejected reason: Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions

Status

Show unmaintained releases

Package	Ubuntu Release	Status
python2.7	15.10 wily	Not affected
	15.04 vivid	Not affected
	14.10 utopic	Fixed 2.7.8-10ubuntu1.1
	14.04 LTS trusty	Fixed 2.7.6-8ubuntu0.2
	13.10 saucy	Ignored end of life
	13.04 raring	Ignored end of life
	12.10 quantal	Ignored end of life
	12.04 LTS precise	Fixed 2.7.3-0ubuntu3.8
	10.04 LTS lucid	Not in release
python3.2	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.10 utopic	Not in release
	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	13.04 raring	Not in release
	12.10 quantal	Ignored end of life
	12.04 LTS precise	Fixed 3.2.3-0ubuntu3.7
	10.04 LTS lucid	Not in release
python3.4	15.10 wily	Not affected
	15.04 vivid	Not affected
	14.10 utopic	Not affected
	14.04 LTS trusty	Not affected
	13.10 saucy	Not in release
	13.04 raring	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
python2.7	Upstream: http://hg.python.org/cpython/rev/8a22a2804a66 Upstream: http://hg.python.org/cpython/rev/5e310c6a8520 Upstream: http://hg.python.org/cpython/rev/44ac81e6d584 Upstream: http://hg.python.org/cpython/rev/44ac81e6d584 Upstream: http://hg.python.org/cpython/rev/dd906f4ab923 Upstream: http://hg.python.org/cpython/rev/d7ae948d9eee Upstream: http://hg.python.org/cpython/rev/36680a7c0e22 Upstream: http://hg.python.org/cpython/rev/339f877cca11 Upstream: http://hg.python.org/cpython/rev/923aac88a3cc
python3.2	Upstream: https://hg.python.org/cpython/rev/deee87d61436 Upstream: https://hg.python.org/cpython/rev/783e7b4375ac Upstream: https://hg.python.org/cpython/rev/5d1c03316af7 Upstream: https://hg.python.org/cpython/rev/985bda4edf9d Upstream: https://hg.python.org/cpython/rev/76be07730f8d Upstream: https://hg.python.org/cpython/rev/0f362676460d
python3.4	Upstream: http://hg.python.org/cpython/rev/e445d02e5306 Upstream: http://hg.python.org/cpython/rev/38db4d0726bd Upstream: http://hg.python.org/cpython/rev/4b0364fc5711 Upstream: http://hg.python.org/cpython/rev/fc88bd80d925 Upstream: http://hg.python.org/cpython/rev/68029048c9c6 Upstream: http://hg.python.org/cpython/rev/d62a67318023

References

Related Ubuntu Security Notices (USN)

USN-2653-1
Python vulnerabilities
25 June 2015

Status

Patch details

References

Related Ubuntu Security Notices (USN)

Other references