# CVE-2018-20852: Python 3.6 and 2 others: Improper Input Validation

CVE-2018-20852 is fixed in 87 products on 2 platforms, first by Python 3.7 3.7.3, released March 25, 2019. 2 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-20852
- Priority: Routine
- CVSS: 5.3 (Medium)
- EPSS: 0.0367
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 12, 2019
- Weakness: CWE-20: Improper Input Validation
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2018-20852

## Description

http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Python 3.7 | 3.7.3 | [Python 3.7 3.7.3](https://patchblox.com/security/data/fix/windows-app/python.python.3.7-3.7.3.md) | Mar 25, 2019 |
| Linux | babel RHEL 8 | 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | babel ol 8 | 0:2.5.1-9.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | idle-python2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [idle-python2.7 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python2.7-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | idle-python3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [idle-python3.6 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python3.6-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | libpython2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [libpython2.7 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | libpython2.7-minimal Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [libpython2.7-minimal 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-minimal-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | libpython2.7-stdlib Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [libpython2.7-stdlib 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-stdlib-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | libpython2.7-testsuite Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [libpython2.7-testsuite 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-testsuite-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | libpython3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [libpython3.6 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | libpython3.6-minimal Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [libpython3.6-minimal 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-minimal-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | libpython3.6-stdlib Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [libpython3.6-stdlib 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-stdlib-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | libpython3.6-testsuite Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [libpython3.6-testsuite 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-testsuite-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | platform-python RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | platform-python ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | platform-python-debug RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | platform-python-debug ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | platform-python-devel RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | platform-python-devel ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | python-nose-docs RHEL 8 | 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python-nose-docs ol 8 | 0:1.3.7-30.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python-psycopg2-doc RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python-psycopg2-doc ol 8 | 0:2.7.5-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python-sqlalchemy-doc RHEL 8 | 0:1.3.2-1.module+el8.1.0+2994+98e054d6 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python-sqlalchemy-doc ol 8 | 0:1.3.2-1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2 RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2 ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-Cython RHEL 8 | 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-Cython ol 8 | 0:0.28.1-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-PyMySQL RHEL 8 | 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-PyMySQL ol 8 | 0:0.8.0-10.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-attrs RHEL 8 | 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-attrs ol 8 | 0:17.4.0-10.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-babel RHEL 8 | 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-babel ol 8 | 0:2.5.1-9.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-backports RHEL 8 | 0:1.0-15.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-backports ol 8 | 0:1.0-15.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-backports-ssl_match_hostname RHEL 8 | 0:3.5.0.1-11.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-backports-ssl_match_hostname ol 8 | 0:3.5.0.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-bson RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-bson ol 8 | 0:3.6.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-chardet RHEL 8 | 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-chardet ol 8 | 0:3.0.4-10.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-coverage RHEL 8 | 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-coverage ol 8 | 0:4.5.1-4.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-debug RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-debug ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-devel RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-devel ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-dns RHEL 8 | 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-dns ol 8 | 0:1.15.0-10.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-docs RHEL 8 | 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-docs ol 8 | 0:2.7.16-2.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-docs-info RHEL 8 | 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-docs-info ol 8 | 0:2.7.16-2.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-docutils RHEL 8 | 0:0.14-12.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-docutils ol 8 | 0:0.14-12.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-funcsigs RHEL 8 | 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-funcsigs ol 8 | 0:1.0.2-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-idna RHEL 8 | 0:2.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-idna ol 8 | 0:2.5-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-ipaddress RHEL 8 | 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-ipaddress ol 8 | 0:1.0.18-6.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-jinja2 RHEL 8 | 0:2.10-8.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-jinja2 ol 8 | 0:2.10-8.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-libs RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-libs ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-lxml RHEL 8 | 0:4.2.3-3.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-lxml ol 8 | 0:4.2.3-3.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-markupsafe RHEL 8 | 0:0.23-19.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-markupsafe ol 8 | 0:0.23-19.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-mock RHEL 8 | 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-mock ol 8 | 0:2.0.0-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-nose RHEL 8 | 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-nose ol 8 | 0:1.3.7-30.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-numpy RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-numpy ol 8 | 1:1.14.2-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-numpy-doc RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-numpy-doc ol 8 | 1:1.14.2-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-numpy-f2py RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-numpy-f2py ol 8 | 1:1.14.2-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pip RHEL 8 | 0:9.0.3-16.module+el8.2.0+5478+b505947e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pip ol 8 | 0:9.0.3-16.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pip-wheel RHEL 8 | 0:9.0.3-16.module+el8.2.0+5478+b505947e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pip-wheel ol 8 | 0:9.0.3-16.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pluggy RHEL 8 | 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pluggy ol 8 | 0:0.6.0-8.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-psycopg2 RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-psycopg2 ol 8 | 0:2.7.5-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-psycopg2-debug RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-psycopg2-debug ol 8 | 0:2.7.5-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-psycopg2-tests RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-psycopg2-tests ol 8 | 0:2.7.5-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-py RHEL 8 | 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-py ol 8 | 0:1.5.3-6.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pygments RHEL 8 | 0:2.2.0-20.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pygments ol 8 | 0:2.2.0-20.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pymongo RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pymongo ol 8 | 0:3.6.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pymongo-gridfs RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pymongo-gridfs ol 8 | 0:3.6.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pysocks RHEL 8 | 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pysocks ol 8 | 0:1.6.8-6.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pytest RHEL 8 | 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pytest ol 8 | 0:3.4.2-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pytest-mock RHEL 8 | 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pytest-mock ol 8 | 0:1.9.0-4.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pytz RHEL 8 | 0:2017.2-12.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pytz ol 8 | 0:2017.2-12.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pyyaml RHEL 8 | 0:3.12-16.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pyyaml ol 8 | 0:3.12-16.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-requests RHEL 8 | 0:2.20.0-3.module+el8.2.0+4577+feefd9b8 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-requests ol 8 | 0:2.20.0-3.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-rpm-macros RHEL 8 | 0:3-38.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-rpm-macros ol 8 | 0:3-38.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-scipy RHEL 8 | 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-scipy ol 8 | 0:1.0.0-20.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-setuptools RHEL 8 | 0:39.0.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-setuptools ol 8 | 0:39.0.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-setuptools-wheel RHEL 8 | 0:39.0.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-setuptools-wheel ol 8 | 0:39.0.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-setuptools_scm RHEL 8 | 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-setuptools_scm ol 8 | 0:1.15.7-6.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-six RHEL 8 | 0:1.11.0-5.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-six ol 8 | 0:1.11.0-5.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-sqlalchemy RHEL 8 | 0:1.3.2-1.module+el8.1.0+2994+98e054d6 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-sqlalchemy ol 8 | 0:1.3.2-1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-test RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-test ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-tkinter RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-tkinter ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-tools RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-tools ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-urllib3 RHEL 8 | 0:1.24.2-1.module+el8.1.0+3280+19512f10 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-urllib3 ol 8 | 0:1.24.2-1.0.2.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-virtualenv RHEL 8 | 0:15.1.0-19.module+el8.1.0+3507+d69c168d | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-virtualenv ol 8 | 0:15.1.0-19.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-wheel RHEL 8 | 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-wheel ol 8 | 1:0.31.1-2.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-wheel-wheel RHEL 8 | 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-wheel-wheel ol 8 | 1:0.31.1-2.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [python2.7 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | python2.7-examples Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [python2.7-examples 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-examples-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | python2.7-minimal Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [python2.7-minimal 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-minimal-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | python3-idle RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | python3-idle ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | python3-libs RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | python3-libs ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | python3-test RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | python3-test ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | python3-tkinter RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | python3-tkinter ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | python3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [python3.6 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | python3.6-examples Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [python3.6-examples 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-examples-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | python3.6-minimal Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [python3.6-minimal 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-minimal-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | python3.6-venv Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [python3.6-venv 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-venv-3.6.8-1-18.04.2.md) | Jul 12, 2019 |

## No fix yet

| Platform | Product | Status |
|---|---|---|
| Windows apps | Python 3.5 | no-fix |
| Windows apps | Python 3.6 | no-fix |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.