{"id":"CLSA-2026-1787660038","summary":"Fix CVE(s): CVE-2026-0864","details":"   * SECURITY UPDATE: configuration injection in configparser via a carriage\n     return in an attacker-controlled written value\n     - debian/patches/CVE-2026-0864.patch: in Lib/configparser.py, normalize\n       CR and CRLF to LF before indenting continuation lines in\n       RawConfigParser._write_section(), so a bare carriage return inside a\n       written value can no longer round-trip into an unindented line that\n       the parser reads back as a separate \"key = value\" pair. Backport of\n       upstream commit 5858e42c539d (gh-143927 / GH-143929) via the 3.10\n       backport 12dcbd74d356; applies to 3.7.3 with line offsets only.\n       Bundles the upstream regression test test_crlf_normalization\n       (test_configparser.py).\n     - CVE-2026-0864","modified":"2026-10-26T09:31:52.829998473Z","published":"2026-08-25T12:14:10Z","upstream":["CVE-2026-0864"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1787660038.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0864"}],"affected":[{"package":{"name":"idle-python3.7","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/idle-python3.7?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"libpython3.7","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpython3.7?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"libpython3.7-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpython3.7-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"libpython3.7-minimal","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpython3.7-minimal?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"libpython3.7-stdlib","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpython3.7-stdlib?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"libpython3.7-testsuite","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpython3.7-testsuite?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"python3.7","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"python3.7-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"python3.7-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"python3.7-examples","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7-examples?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"python3.7-minimal","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7-minimal?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}},{"package":{"name":"python3.7-venv","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3.7-venv?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787660038.json"}}],"schema_version":"1.9.0"}