title: Red Hat Security Advisory: rh-python36 security, bug fix, and enhancement update
description: python: XSS vulnerability in the documentation XML-RPC server in server_title field python: CRLF injection via the host part of the url passed to urlopen() python: infinite loop in the tarfile module via crafted TAR archive python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS python: DoS via inefficiency in IPv{4,6}Interface classes python: CRLF injection via HTTP request method in httplib/http.client
cpes: cpe:/a:redhat:rhel_software_collections:3::el6 cpe:/a:redhat:rhel_software_collections:3::el7