CLSA-2026-1788356018

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1788356018.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1788356018
Upstream
Published
2026-09-02T13:33:50Z
Modified
2026-10-26T09:31:38Z
Summary
python2: Fix of CVE-2026-0864
Details
  • CVE-2026-0864: normalize CR and CRLF line endings to LF plus tab continuation when ConfigParser.write() serialises a multi-line value. A bare carriage return inside an attacker-controlled value was emitted verbatim and read back by line-oriented consumers as a line break, injecting unintended keys and values into the written file.
References

Affected packages

TuxCare:CentOS-Stream:8
python2

Package

Name
python2
Purl
pkg:rpm/tuxcare/python2?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2542+58c84dd1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1788356018.json"
python2-debug

Package

Name
python2-debug
Purl
pkg:rpm/tuxcare/python2-debug?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2542+58c84dd1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1788356018.json"
python2-devel

Package

Name
python2-devel
Purl
pkg:rpm/tuxcare/python2-devel?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2542+58c84dd1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1788356018.json"
python2-libs

Package

Name
python2-libs
Purl
pkg:rpm/tuxcare/python2-libs?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2542+58c84dd1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1788356018.json"
python2-test

Package

Name
python2-test
Purl
pkg:rpm/tuxcare/python2-test?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2542+58c84dd1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1788356018.json"
python2-tkinter

Package

Name
python2-tkinter
Purl
pkg:rpm/tuxcare/python2-tkinter?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2542+58c84dd1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1788356018.json"
python2-tools

Package

Name
python2-tools
Purl
pkg:rpm/tuxcare/python2-tools?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-17.module_el8+2542+58c84dd1.tuxcare.els15

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1788356018.json"