[CLSA-2025:1760370210] Fix CVE(s): CVE-2020-26116, CVE-2020-8492
Type:
security
Severity:
Important
Release date:
2025-10-13 15:43:34 UTC
Description:
* SECURITY UPDATE: DoS in regular expression because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking - debian/patches/CVE-2020-8492.patch: fix DoS in the urllib regexp - CVE-2020-8492 * SECURITY UPDATE: a header injection vulnerability for http methods in the httplib - debian/patches/CVE-2020-26116.patch: prevent header injection in http methods in httplib - CVE-2020-26116
Updated packages:
  • alt-python27_2.7.18-7_amd64.deb
    sha:453ee1625723b34fc824d47d98f5bc5ed5ba2e10
  • alt-python27-debug_2.7.18-7_amd64.deb
    sha:1dc440a99a2b4be571be43a56639e0de23d9ca39
  • alt-python27-devel_2.7.18-7_amd64.deb
    sha:d57a339ab2f1916194bc26233422facac413185e
  • alt-python27-idle_2.7.18-7_amd64.deb
    sha:b60da15cedec09f937cecadcba551c1fe6ead7a7
  • alt-python27-libs_2.7.18-7_amd64.deb
    sha:96a596277163377f53959fb58aa50fcd7d355cc1
  • alt-python27-test_2.7.18-7_amd64.deb
    sha:ca081724f31134a35dda69fab02d38ac869d9c04
  • alt-python27-tkinter_2.7.18-7_amd64.deb
    sha:cbf5aa58a7c287a53f7faba88fbfcbc6c4a9be03
  • alt-python27-tools_2.7.18-7_amd64.deb
    sha:a7a2d11c76bdee51dd2d7f39ad755cbd493c8655
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.