Release Info

Advisory: CLSA-2026:1767800092

OS: CentOS Stream 8 ELS

Public date: 2026-01-07 15:34:54.056811

Project: python2

Version: 2.7.18-17.module_el8+2327+18e1493b.tuxcare.els4

Errata link: https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1767800092.html

Changelog

- CVE-2025-0938: disallow square brackets in domain names for parsed URLs to prevent differential URL parsing

Update

Update command: dnf update python2*

Packages list

python2-2.7.18-17.module_el8+2327+18e1493b.tuxcare.els4.x86_64.rpm python2-debug-2.7.18-17.module_el8+2327+18e1493b.tuxcare.els4.x86_64.rpm python2-devel-2.7.18-17.module_el8+2327+18e1493b.tuxcare.els4.x86_64.rpm python2-libs-2.7.18-17.module_el8+2327+18e1493b.tuxcare.els4.x86_64.rpm python2-test-2.7.18-17.module_el8+2327+18e1493b.tuxcare.els4.x86_64.rpm python2-tkinter-2.7.18-17.module_el8+2327+18e1493b.tuxcare.els4.x86_64.rpm python2-tools-2.7.18-17.module_el8+2327+18e1493b.tuxcare.els4.x86_64.rpm

CVEs

CVE-2025-0938