USN-8614-1: python2.7 Ubuntu
Vulnerability summary
USN-8614-1 is a vulnerability in python2.7 Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 27-07-2026PublishedVulnerability first disclosed.
- 28-07-2026Last modifiedVulnerability information updated.
Description
python2.7, python3.5 vulnerabilities It was discovered that Python incorrectly handled expanding environment variables in os.path.expandvars() when the input was user-controlled. An attacker could possibly use this issue to cause Python to consume resources, leading to a denial of service. (CVE-2025-6075) It was discovered that Python incorrectly handled certain malformed HTML-like markup in the HTMLParser module, raising an uncaught exception. A remote attacker could possibly use this issue to cause applications that parse untrusted input to crash, resulting in a denial of service. (CVE-2025-69534)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu2 products
- python2.7< 2.7.12-1ubuntu0~16.04.18+esm21
- python3.5< 3.5.2-2ubuntu0~16.04.13+esm24
1 vendor · 2 products