[CLSA-2025:1760369775] Fix CVE(s): CVE-2020-26116, CVE-2020-8492
Type:
security
Severity:
Important
Release date:
2025-10-13 15:36:18 UTC
Description:
* SECURITY UPDATE: DoS in regular expression because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking - debian/patches/CVE-2020-8492.patch: fix DoS in the urllib regexp - CVE-2020-8492 * SECURITY UPDATE: a header injection vulnerability for http methods in the httplib - debian/patches/CVE-2020-26116.patch: prevent header injection in http methods in httplib - CVE-2020-26116
Updated packages:
  • alt-python27_2.7.18-7_amd64.deb
    sha:5be3a90678fcc3d6a28f09d8cc376be5487a1a32
  • alt-python27-debug_2.7.18-7_amd64.deb
    sha:f51038f5db4026283f07ddfb494d0bac689221b1
  • alt-python27-devel_2.7.18-7_amd64.deb
    sha:157a6df882c200e9d29663faca58042bf85d318a
  • alt-python27-idle_2.7.18-7_amd64.deb
    sha:079f420169fa6d9d9e857d8ebe9cb95594385a42
  • alt-python27-libs_2.7.18-7_amd64.deb
    sha:9c18d1e0faac2a0125e404916f36839e99b99a06
  • alt-python27-test_2.7.18-7_amd64.deb
    sha:a463da6c5a6a14900b74773b4a97aeaf8c742a48
  • alt-python27-tkinter_2.7.18-7_amd64.deb
    sha:62d63ea2c743ff01589ce118ce39248b1c492908
  • alt-python27-tools_2.7.18-7_amd64.deb
    sha:6c4ae82ba23569a00f1ef2034405b1e304ee65d0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.