CLSA-2026-1777548458

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1777548458

Upstream

CVE-2026-4519

CVE-2026-4786

Published

2026-04-30T11:27:43Z

Modified

2026-06-04T09:47:03.646938954Z

Summary

Fix CVE(s): CVE-2026-4519, CVE-2026-4786

Details

SECURITY UPDATE: webbrowser.open accepts URLs with leading dashes
- debian/patches/CVE-2026-4519-CVE-2026-4786.patch: reject URLs whose lstrip starts with '-' in Lib/webbrowser.py; also fix bypass via %action substitution in UnixBrowser.open().
- CVE-2026-4519
- CVE-2026-4786

References

https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1777548458.html

Affected packages

TuxCare:Ubuntu:16.04

idle-python3.5

Package

Name: idle-python3.5
Purl: pkg:deb/tuxcare/idle-python3.5?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

libpython3.5

Package

Name: libpython3.5
Purl: pkg:deb/tuxcare/libpython3.5?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

libpython3.5-dev

Package

Name: libpython3.5-dev
Purl: pkg:deb/tuxcare/libpython3.5-dev?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

libpython3.5-minimal

Package

Name: libpython3.5-minimal
Purl: pkg:deb/tuxcare/libpython3.5-minimal?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

libpython3.5-stdlib

Package

Name: libpython3.5-stdlib
Purl: pkg:deb/tuxcare/libpython3.5-stdlib?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

libpython3.5-testsuite

Package

Name: libpython3.5-testsuite
Purl: pkg:deb/tuxcare/libpython3.5-testsuite?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

python3.5

Package

Name: python3.5
Purl: pkg:deb/tuxcare/python3.5?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

python3.5-dev

Package

Name: python3.5-dev
Purl: pkg:deb/tuxcare/python3.5-dev?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

python3.5-doc

Package

Name: python3.5-doc
Purl: pkg:deb/tuxcare/python3.5-doc?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

python3.5-examples

Package

Name: python3.5-examples
Purl: pkg:deb/tuxcare/python3.5-examples?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

python3.5-minimal

Package

Name: python3.5-minimal
Purl: pkg:deb/tuxcare/python3.5-minimal?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"

python3.5-venv

Package

Name: python3.5-venv
Purl: pkg:deb/tuxcare/python3.5-venv?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777548458.json"