RHSA-2020:1346MediumCVSS 7.4

Red Hat Security Advisory: python security update

Published
April 7, 2020
Last Modified
June 26, 2026

🔗 CVE IDs covered (6)

CVE-2018-14647 →CVE-2019-9740 →CVE-2019-9947 →CVE-2019-9948 →CVE-2018-1060 →CVE-2018-1061 →

📋 Description

CVE-2018-1060 — python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib CVE-2018-1061 — python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib CVE-2018-14647 — python: Missing salt initialization in _elementtree.c module CVE-2019-9740 — python: CRLF injection via the query part of the url passed to urlopen() CVE-2019-9947 — python: CRLF injection via the path part of the url passed to urlopen() CVE-2019-9948 — python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms

🔗 References (9)