Ubuntu alert USN-8443-1 (webpy)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8443-1] web.py vulnerability
Date:
             
 
Wed, 17 Jun 2026 13:48:10 +0000
Message-ID:
             
 
<E1wZqck-0007AS-8c@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8443-1
June 17, 2026

webpy vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

web.py could be made to alter or expose database information over the
network.

Software Description:
- webpy: web framework for Python

Details:

It was discovered that web.py incorrectly handled sequence names in
PostgreSQL insert queries. An attacker could possibly use this issue
to perform SQL injection attacks, resulting in the alteration or exposure
of database information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  python3-webpy                   1:0.62-4ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  python3-webpy                   1:0.61-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 20.04 LTS
  python3-webpy                   1:0.40-2ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  python-webpy                    1:0.38+20170615-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  python3-webpy                   1:0.38+20170615-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  python-webpy                    1:0.37+20120626-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8443-1
  CVE-2025-3818


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=ns1A
-----END PGP SIGNATURE-----