CVE-2020-26116

• BIT-libpython-2020-26116
• BIT-python-2020-26116
• BIT-python-min-2020-26116
• PSF-2020-5

• ALSA-2021:1761
• ALSA-2021:1879
• SUSE-SU-2020:14550-1
• SUSE-SU-2020:3115-1
• SUSE-SU-2020:3121-1
• SUSE-SU-2020:3262-1
• SUSE-SU-2020:3563-1
• SUSE-SU-2020:3930-1
• SUSE-SU-2021:0299-1
• SUSE-SU-2021:0341-1
• SUSE-SU-2021:0342-1
• SUSE-SU-2021:0486-1
• SUSE-SU-2021:0515-1
• openSUSE-SU-2020:1859-1
• openSUSE-SU-2020:1988-1
• openSUSE-SU-2020:2332-1
• openSUSE-SU-2020:2333-1
• openSUSE-SU-2024:11284-1
• openSUSE-SU-2024:11285-1
• openSUSE-SU-2024:11551-1

• 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS Calculator

{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "vendor_product": "canonical:ubuntu_linux",
            "extracted_events": [
                {
                    "introduced": "12.04"
                },
                {
                    "last_affected": "12.04"
                },
                {
                    "introduced": "14.04"
                },
                {
                    "last_affected": "14.04"
                },
                {
                    "introduced": "16.04"
                },
                {
                    "last_affected": "16.04"
                },
                {
                    "introduced": "18.04"
                },
                {
                    "last_affected": "18.04"
                }
            ],
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"
            ]
        },
        {
            "source": "CPE_STRING",
            "vendor_product": "debian:debian_linux",
            "extracted_events": [
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                }
            ],
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "source": "CPE_STRING",
            "vendor_product": "fedoraproject:fedora",
            "extracted_events": [
                {
                    "introduced": "31"
                },
                {
                    "last_affected": "31"
                },
                {
                    "introduced": "32"
                },
                {
                    "last_affected": "32"
                },
                {
                    "introduced": "33"
                },
                {
                    "last_affected": "33"
                }
            ],
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*"
            ]
        },
        {
            "source": "CPE_STRING",
            "vendor_product": "opensuse:leap",
            "extracted_events": [
                {
                    "introduced": "15.1"
                },
                {
                    "last_affected": "15.1"
                }
            ],
            "cpes": [
                "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"
            ]
        },
        {
            "source": "CPE_STRING",
            "vendor_product": "oracle:zfs_storage_appliance_kit",
            "extracted_events": [
                {
                    "introduced": "8.8"
                },
                {
                    "last_affected": "8.8"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*"
            ]
        }
    ]
}

• https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BW4GCLQISJCOEGQNIMVUZDQMIY6RR6CC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDQ2THWU4GPV4Y5H5WW5PFMSWXL2CRFD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWMAVY4T4257AZHTF2RZJKNJNSJFY24O/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXI72HIHMXCQFWTULUXDG7VDA2BCYL4Y/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QOX7DGMMWWL6POCRYGAUCISOLR2IG3XV/
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00027.html
• https://lists.debian.org/debian-lts-announce/2020/11/msg00032.html
• https://security.gentoo.org/glsa/202101-18
• https://security.netapp.com/advisory/ntap-20201023-0001/
• https://usn.ubuntu.com/4581-1/
• https://bugs.python.org/issue39603
• https://python-security.readthedocs.io/vuln/http-header-injection-method.html
• https://www.oracle.com/security-alerts/cpuoct2021.html