[CLSA-2025:1760369318] Fix CVE(s): CVE-2020-26116, CVE-2020-8492
Type:
security
Severity:
Important
Release date:
2025-10-13 15:28:42 UTC
Description:
* SECURITY UPDATE: DoS in regular expression because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking - debian/patches/CVE-2020-8492.patch: fix DoS in the urllib regexp - CVE-2020-8492 * SECURITY UPDATE: a header injection vulnerability for http methods in the httplib - debian/patches/CVE-2020-26116.patch: prevent header injection in http methods in httplib - CVE-2020-26116
Updated packages:
  • alt-python27_2.7.18-7_amd64.deb
    sha:31e11057762293360ba07bb0b27a0062db003143
  • alt-python27-debug_2.7.18-7_amd64.deb
    sha:8671ee510eabc2d906d9ab71fee1833689115ac6
  • alt-python27-devel_2.7.18-7_amd64.deb
    sha:94231fb4d93c2d75f46ed306ecd690dcf6889181
  • alt-python27-idle_2.7.18-7_amd64.deb
    sha:58ef1a246fa6fe635d07c3659c2dfb2252153316
  • alt-python27-libs_2.7.18-7_amd64.deb
    sha:82640fc792396b7c6a923cf66e667b9c8224e3d5
  • alt-python27-test_2.7.18-7_amd64.deb
    sha:573db05ecbf0b52c50bb500dd9d111534bdaeb31
  • alt-python27-tkinter_2.7.18-7_amd64.deb
    sha:b2012b49dbefbe396e3d66095d98cc359c36153d
  • alt-python27-tools_2.7.18-7_amd64.deb
    sha:64439121cd9d0a51071d89bbc14d823afddc730c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.