========================================================================== Ubuntu Security Notice USN-8614-1 July 27, 2026
python2.7, python3.5 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
Summary:
Several security issues were fixed in Python.
Software Description:
- python2.7: An interactive high-level object-oriented language
- python3.5: An interactive high-level object-oriented language
Details:
It was discovered that Python incorrectly handled expanding environment
variables in os.path.expandvars() when the input was user-controlled. An
attacker could possibly use this issue to cause Python to consume
resources, leading to a denial of service. (CVE-2025-6075)
It was discovered that Python incorrectly handled certain malformed
HTML-like markup in the HTMLParser module, raising an uncaught exception.
A remote attacker could possibly use this issue to cause applications that
parse untrusted input to crash, resulting in a denial of service.
(CVE-2025-69534)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 LTS
libpython2.7-minimal 2.7.12-1ubuntu0~16.04.18+esm21
Available with Ubuntu Pro
libpython2.7-stdlib 2.7.12-1ubuntu0~16.04.18+esm21
Available with Ubuntu Pro
libpython3.5-stdlib 3.5.2-2ubuntu0~16.04.13+esm24
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8614-1
CVE-2025-6075, CVE-2025-69534
signature.asc
Description: OpenPGP digital signature
