{"id":"CLSA-2021-1633442879","summary":"Fix of CVE: CVE-2020-26116, CVE-2020-8492, CVE-2018-20852, CVE-2020-27619","details":"- Add Oracle Linux distribution in platform.py\n- CVE-2018-20852: Prefix dot in domain for proper subdomain validation\n- CVE-2020-8492: Python allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client\n- CVE-2020-26116: http.client allows CRLF injection if the attacker controls the HTTP request method\n- CVE-2020-27619: Unsafe use of eval() on data retrieved via HTTP in the test suite","modified":"2026-05-27T11:34:40.802704061Z","published":"2021-10-05T14:07:59Z","upstream":["CVE-2018-20852","CVE-2020-26116","CVE-2020-27619","CVE-2020-8492"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/els6/CLSA-2021-1633442879.html"}],"affected":[{"package":{"name":"python","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.cloudlinux.els"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2021-1633442879.json"}},{"package":{"name":"python-devel","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-devel?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.cloudlinux.els"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2021-1633442879.json"}},{"package":{"name":"python-libs","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-libs?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.cloudlinux.els"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2021-1633442879.json"}},{"package":{"name":"python-test","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-test?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.cloudlinux.els"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2021-1633442879.json"}},{"package":{"name":"python-tools","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-tools?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.cloudlinux.els"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2021-1633442879.json"}},{"package":{"name":"tkinter","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/tkinter?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.cloudlinux.els"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2021-1633442879.json"}}],"schema_version":"1.7.5"}