{"id":"CLSA-2025-1742379028","summary":"Fix CVE(s): CVE-2024-11168, CVE-2024-4032, CVE-2025-0938","details":"   * SECURITY UPDATE: Improper validation of bracketed hosts in urllib\n     - debian/patches/CVE-2024-11168.patch: add checks to ensure that bracketed\n       hosts found by urlsplit are of IPv6 or IPvFuture format\n     - CVE-2024-11168\n   * SECURITY UPDATE: Incomplete validation of bracketed hosts in urllib\n     - debian/patches/CVE-2025-0938.patch: disallow square brackets\n       (`[` and `]`) in domain names for parsed URLs\n     - CVE-2025-0938\n   * SECURITY UPDATE: Incorrent information about whether certain IPv4 and IPv6\n     addresses were designated as “globally reachable” or “private” in\n     ipaddress module\n     - debian/patches/CVE-2024-4032.patch: fix \"private\" (non-global) IP\n      address ranges\n     - CVE-2024-4032","modified":"2026-06-04T09:46:39.334590798Z","published":"2025-03-19T10:10:33Z","upstream":["CVE-2024-11168","CVE-2024-4032","CVE-2025-0938"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2025-1742379028.html"}],"affected":[{"package":{"name":"idle-python3.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/idle-python3.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"libpython3.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libpython3.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"libpython3.5-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libpython3.5-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"libpython3.5-minimal","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libpython3.5-minimal?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"libpython3.5-stdlib","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libpython3.5-stdlib?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"libpython3.5-testsuite","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libpython3.5-testsuite?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"python3.5","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/python3.5?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"python3.5-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/python3.5-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"python3.5-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/python3.5-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"python3.5-examples","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/python3.5-examples?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"python3.5-minimal","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/python3.5-minimal?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}},{"package":{"name":"python3.5-venv","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/python3.5-venv?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742379028.json"}}],"schema_version":"1.7.5"}