RHSA-2020:4299MediumCVSS 7.5

Red Hat Security Advisory: rh-python38 security, bug fix, and enhancement update

Published
October 20, 2020
Last Modified
June 26, 2026

🔗 CVE IDs covered (5)

CVE-2020-26137 →CVE-2019-18874 →CVE-2019-20907 →CVE-2020-14422 →CVE-2020-26116 →

📋 Description

CVE-2019-18874 — python-psutil: Double free because of refcount mishandling CVE-2019-20907 — python: infinite loop in the tarfile module via crafted TAR archive CVE-2020-14422 — python: DoS via inefficiency in IPv{4,6}Interface classes CVE-2020-26116 — python: CRLF injection via HTTP request method in httplib/http.client CVE-2020-26137 — python-urllib3: CRLF injection via HTTP request method

🔗 References (9)