Medium DLA-2456-1 2 CVEs

python3.5 - security update

Published Nov 18, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	python3.5	3.5.3-1+deb9u3

Vulnerabilities 2

Medium 5.5

CVE-2019-20907

In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when …

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine

Jul 13, 2020
Unscored —

CVE-2020-26116

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF in…

python3.4 python3.5 python3.6 python3.8 Debian Ubuntu

Sep 27, 2020