urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen(‘local_file:///etc/passwd’) call.

OSVersionArchitecturePackageVersionFilename
Alpine3.10-communitynoarchpython2-tkinter< 2.7.17-r0UNKNOWN
Alpine3.10-mainnoarchpython2< 2.7.16-r1UNKNOWN
Alpine3.11-communitynoarchpython2-tkinter< 2.7.17-r0UNKNOWN
Alpine3.11-mainnoarchpython2< 2.7.16-r1UNKNOWN
Alpine3.12-mainnoarchpython2< 2.7.16-r1UNKNOWN
Alpine3.13-communitynoarchpython2< 2.7.16-r1UNKNOWN
Alpine3.14-communitynoarchpython2< 2.7.16-r1UNKNOWN
Alpine3.15-communitynoarchpython2< 2.7.16-r1UNKNOWN
Alpine3.7-mainnoarchpython2< 2.7.15-r2UNKNOWN
Alpine3.8-mainnoarchpython2< 2.7.15-r2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.10-community	noarch	python2-tkinter	< 2.7.17-r0	UNKNOWN
Alpine	3.10-main	noarch	python2	< 2.7.16-r1	UNKNOWN
Alpine	3.11-community	noarch	python2-tkinter	< 2.7.17-r0	UNKNOWN
Alpine	3.11-main	noarch	python2	< 2.7.16-r1	UNKNOWN
Alpine	3.12-main	noarch	python2	< 2.7.16-r1	UNKNOWN
Alpine	3.13-community	noarch	python2	< 2.7.16-r1	UNKNOWN
Alpine	3.14-community	noarch	python2	< 2.7.16-r1	UNKNOWN
Alpine	3.15-community	noarch	python2	< 2.7.16-r1	UNKNOWN
Alpine	3.7-main	noarch	python2	< 2.7.15-r2	UNKNOWN
Alpine	3.8-main	noarch	python2	< 2.7.15-r2	UNKNOWN