========================================================================== Ubuntu Security Notice USN-8505-1 July 06, 2026
python-parsl vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 24.04 LTS
Summary:
Parsl could be made to expose sensitive information over the network.
Software Description:
- python-parsl: Create parallel programs composed of Python functions and
external components
Details:
It was discovered that Parsl incorrectly constructed SQL queries using
unsafe string formatting with user-supplied input in the parsl-visualize
component. A remote attacker could possibly use this issue to perform SQL
injection attacks, leading to data exfiltration or a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 24.04 LTS
python-parsl-doc 2024.02.26+ds-1ubuntu0.1~esm1
Available with Ubuntu Pro
python3-parsl 2024.02.26+ds-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8505-1
CVE-2026-21892
signature.asc
Description: OpenPGP digital signature
