{"id":"CLSA-2026-1778769563","summary":"python: Fix of 4 CVEs","details":"- CVE-2019-9740: reject control characters in HTTP URL paths in\n  httplib.HTTPConnection.putrequest to prevent CRLF header injection\n- CVE-2019-18348: reject control characters in hostnames in\n  httplib.HTTPConnection.__init__ via a new _validate_host helper to\n  prevent CRLF header injection (the glibc CVE-2016-10739 mitigation\n  shipped on RHEL 7+ is not present on CentOS 6 / Oracle Linux 6 ELS)\n- CVE-2018-1000030: cache the readahead buffer thread-locally inside\n  file_iternext to fix heap buffer corruption and crashes when multiple\n  threads iterate over the same file object","modified":"2026-05-27T11:35:07.198473039Z","published":"2026-05-14T19:23:48Z","upstream":["CVE-2016-10739","CVE-2018-1000030","CVE-2019-18348","CVE-2019-9740"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1778769563.html"}],"affected":[{"package":{"name":"python","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1778769563.json"}},{"package":{"name":"python-devel","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-devel?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1778769563.json"}},{"package":{"name":"python-libs","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-libs?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1778769563.json"}},{"package":{"name":"python-test","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-test?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1778769563.json"}},{"package":{"name":"python-tools","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-tools?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1778769563.json"}},{"package":{"name":"tkinter","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/tkinter?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1778769563.json"}}],"schema_version":"1.7.5"}