CentOS 6 ELS: python package gradual rollout completed - TuxCare

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Go straight to an AI summary of this blog post instead

  • Summarize this post with Perplexity
  • Summarize this post with Gemini

A new updated python package within CentOS 6 ELS has been rolled out to 100% and is now available for download from our production repository.

Errata: https://errata.cloudlinux.com/els6/CLSA-2021-1632401716.html


CHANGELOG

python-2.6.6-70.el6.cloudlinux.els

  • Fix prefix dot in domain for proper subdomain validation (CVE-2018-20852)
  • Fix allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client (CVE-2020-8492)
  • Fix http.client allows CRLF injection if the attacker controls the HTTP request method (CVE-2020-26116)
  • Fix unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)

UPDATE COMMAND

yum update python*

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.

Table of Contents
Get the open-source security answers you need

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.