[CLSA-2026:1782980748] python: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-07 13:59:16 UTC
Description:
- CVE-2025-15366: reject control characters in IMAP commands in imaplib.IMAP4._command to prevent command injection via newlines - CVE-2025-15367: reject control characters in POP3 commands in poplib.POP3._putcmd to prevent command injection via newlines
Updated packages:
  • python-2.6.6-70.el6.tuxcare.els24.i686.rpm
    sha:03008e4671d0b8c60725e93e7bde456da4b4079e6a08f08f89a06897202994b8
  • python-2.6.6-70.el6.tuxcare.els24.x86_64.rpm
    sha:f4623feefa316daf283c553d72dacffeb9db409cf92a833fdd4ab64fbffc8202
  • python-devel-2.6.6-70.el6.tuxcare.els24.i686.rpm
    sha:5a5e6052c952bfe24765540df2466f53469d35b113e909a0bb9dcd1998abcab7
  • python-devel-2.6.6-70.el6.tuxcare.els24.x86_64.rpm
    sha:5907eb5d0e7ee5bdfbcef880368b860ffc9b8911aff7e3cf91b2869b81dbd376
  • python-libs-2.6.6-70.el6.tuxcare.els24.i686.rpm
    sha:7f839cef7cfb02882ab201a3432b39456450d8b1cb48c3c7275398e17b92967d
  • python-libs-2.6.6-70.el6.tuxcare.els24.x86_64.rpm
    sha:0744e844d07a834355dea49974724c9836def78f1fec4bc953d7851fc5223617
  • python-test-2.6.6-70.el6.tuxcare.els24.x86_64.rpm
    sha:77524a4766a5b0567ac10bb64a1e818daa044d34f5edc2d608e8f291c41ce9cd
  • python-tools-2.6.6-70.el6.tuxcare.els24.x86_64.rpm
    sha:4c8ddc68a5df28670f40321b5ad1deb492d15cacdd3d2447064ceb4be532bea9
  • tkinter-2.6.6-70.el6.tuxcare.els24.x86_64.rpm
    sha:3d04e91989338112544e006ffaaa54cf710a1ccd19321754820b9e6249e6f861
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.