Unscored USN-4581-1 1 CVE

python2.7, python3.4, python3.5, python3.6 vulnerability

Published Oct 14, 2020 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Python incorrectly handled certain character
sequences. A remote attacker could possibly use this issue to perform
CRLF injection.

Fixed packages 6

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	python2.7	2.7.12-1ubuntu0~16.04.13
Ubuntu · 16.04 LTS 16.04:LTS	python3.5	3.5.2-2ubuntu0~16.04.12
Ubuntu · 18.04 LTS 18.04:LTS	python2.7	2.7.17-1~18.04ubuntu1.2
Ubuntu · 18.04 LTS 18.04:LTS	python3.6	3.6.9-1~18.04ubuntu1.3
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	python2.7	2.7.6-8ubuntu0.6+esm7
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	python3.4	3.4.3-1ubuntu1~14.04.7+esm8

Vulnerabilities 1

Unscored —

CVE-2020-26116

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF in…

python3.4 python3.5 python3.6 python3.8 Debian Ubuntu

Sep 27, 2020

References

report
https://ubuntu.com/security/CVE-2020-26116