{"id":"CLSA-2026-1782980748","summary":"python: Fix of 2 CVEs","details":"- CVE-2025-15366: reject control characters in IMAP commands in imaplib.IMAP4._command to prevent command injection via newlines\n- CVE-2025-15367: reject control characters in POP3 commands in poplib.POP3._putcmd to prevent command injection via newlines","modified":"2026-10-26T09:31:39.110125508Z","published":"2026-07-07T13:59:16Z","upstream":["CVE-2025-15366","CVE-2025-15367"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1782980748.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15366"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367"}],"affected":[{"package":{"name":"python","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els24"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782980748.json"}},{"package":{"name":"python-devel","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-devel?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els24"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782980748.json"}},{"package":{"name":"python-libs","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-libs?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els24"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782980748.json"}},{"package":{"name":"python-test","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-test?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els24"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782980748.json"}},{"package":{"name":"python-tools","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-tools?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els24"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782980748.json"}},{"package":{"name":"tkinter","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/tkinter?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-70.el6.tuxcare.els24"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782980748.json"}}],"schema_version":"1.9.0"}