Linux · Ubuntu · Package update · February 17, 2023

python3.9 3.9.5-3ubuntu0~20.04.1+esm1: python3.9 3.9.5-3ubuntu0~20.04.1+esm1 for Ubuntu 20.04 LTS (focal)

python3.9 3.9.5-3ubuntu0~20.04.1+esm1, released February 17, 2023, fixes 6 CVEs in python3.9. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
6
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.2046
97th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
python3.9Ubuntu 20.04 LTS (focal)3.9.5-3ubuntu0~20.04.1+esm1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-24329 Python 3.10 and 8 others: Improper Input Validation7.5 0.2046 None reported
High CVE-2022-37454 Python 3.8 and 5 others: Integer Overflow or Wraparound9.8 0.0741 None reported
High CVE-2022-45061 python38: ELSA-2023-2763: python38:3.8 and python38-devel:3.8 security update (MODERATE)7.5 0.0333 None reported
High CVE-2021-28861 Python 3.8 and 7 others: URL Redirection to Untrusted Site ('Open Redirect')7.6 0.0284 None reported
High CVE-2015-20107 Python 3.8 and 4 others: Improper Neutralization of Special Elements used in a Command ('Command Injection')7.6 0.0278 None reported
High CVE-2022-42919 Python 3.10 and 4 others: Deserialization of Untrusted Data7.8 0.0080 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.