What is RHSA-2020:4273?

RHSA-2020:4273 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: python27 security, bug fix, and enhancement update

Which CVE IDs does RHSA-2020:4273 cover?

RHSA-2020:4273 covers the following CVE IDs: CVE-2019-18348, CVE-2019-20907, CVE-2019-20916, CVE-2020-26116. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2020:4273?

RHSA-2020:4273 has a CVSS v3 base score of 8.0, published by Red Hat Product Security.

RHSA-2020:4273MediumCVSS 8.0

Red Hat Security Advisory: python27 security, bug fix, and enhancement update

Vendor

Red Hat Product Security

Published

October 20, 2020

Last Modified

June 26, 2026

🔗 CVE IDs covered (4)

CVE-2019-18348 →CVE-2019-20907 →CVE-2019-20916 →CVE-2020-26116 →

📋 Description

CVE-2019-18348 — python: CRLF injection via the host part of the url passed to urlopen() CVE-2019-20907 — python: infinite loop in the tarfile module via crafted TAR archive CVE-2019-20916 — python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py CVE-2020-26116 — python: CRLF injection via HTTP request method in httplib/http.client

🔗 References (8)

selfhttps://access.redhat.com/errata/RHSA-2020:4273
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1727276
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1856481
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1868135
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1882656
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1883014
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4273.json