PT-2026-2977 · Python · Python

Published 2026-01-12 · Updated 2026-01-12

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Python versions prior to 3.8.10-0ubuntu120.04.18+esm4 Python versions prior to 3.9.5-3ubuntu020.04.1+esm8

Description The Python http.client module did not correctly process the Content-Length header in HTTP responses. This allowed a malicious server to trigger excessive memory allocation in Python, potentially leading to a denial of service.

Recommendations Python versions prior to 3.8.10-0ubuntu120.04.18+esm4: Update to version 3.8.10-0ubuntu120.04.18+esm4 or later. Python versions prior to 3.9.5-3ubuntu020.04.1+esm8: Update to version 3.9.5-3ubuntu020.04.1+esm8 or later.

Related Identifiers

USN-7951-1

Affected Products

Python

References · 3

• https://ubuntu.com/security/notices/USN-7951-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-13836 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7951-1 · Vendor Advisory