CVE-2020-27619

In Python3’s Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.

Mitigation

In versions of Python shipped with Red Hat Enterprise Linux and Red Hat Software Collections, the flaw can be mitigated by not running the python tests with network resources enabled. By default, the tests are not run with network resources enabled. Ensure that -u network or -uall are not passed as options to python -m test. For more information on how these commands work, see [1].

1. <https://docs.python.org/3/library/test.html&gt;