[CLSA-2022:1658346794] Fix CVE(s): CVE-2015-20107
Type:
security
Severity:
Critical
Release date:
2022-07-20 19:53:14 UTC
Description:
* SECURITY UPDATE: Injection vulnerability - debian/patches/CVE-2015-20107.patch: Make mailcap refuse to match unsafe filenames/types/param in Lib/mailcap.py. - CVE-2015-20107
Updated packages:
  • idle-python2.7_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_all.deb
    sha:3962d2273660daf693336d9df5cea960ba99dfd6
  • libpython2.7_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_amd64.deb
    sha:09219cb6e5706bcbcdb10671669c3ab73bc04451
  • libpython2.7-dev_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_amd64.deb
    sha:07dbaa8610ccb483679b47b2764ba209f58f812f
  • libpython2.7-minimal_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_amd64.deb
    sha:1d0f6eab40d1d3b44ca93d92d7e27de1519a989a
  • libpython2.7-stdlib_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_amd64.deb
    sha:1ed6afe2d61c6a05d67db057dbf9be0394412e0e
  • libpython2.7-testsuite_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_all.deb
    sha:82e2811dda4ac40ebfdc0e7aefbc674075b5b5ef
  • python2.7_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_amd64.deb
    sha:a40876013d4672d1c30a5170b8ad8298d723ca27
  • python2.7-dev_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_amd64.deb
    sha:75253a5492a1bde79e6e851b494eeb8d65f1aa96
  • python2.7-doc_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_all.deb
    sha:b71cd7706971b4ad74e7a0ccada21a68cbad44f4
  • python2.7-examples_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_all.deb
    sha:39ee4151feb170ee0ddb1a14e3d41c999f380e00
  • python2.7-minimal_2.7.12-1ubuntu0~16.04.18+tuxcare.els4_amd64.deb
    sha:d65df49eb282d0e687284fadbabc1dbe5a483f33
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.