# CVE-2019-16056: Python 3.6 and 2 others: Improper Input Validation

CVE-2019-16056 is fixed in 87 products on 2 platforms, first by idle-python2.7 2.7.15-4ubuntu4~18.04.2, released September 27, 2019. 2 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2019-16056
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0512
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 6, 2019
- Weakness: CWE-20: Improper Input Validation
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2019-16056

## Description

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Python 3.7 | 3.7.5 | [Python 3.7 3.7.5](https://patchblox.com/security/data/fix/windows-app/python.python.3.7-3.7.5.md) | Oct 14, 2019 |
| Linux | babel RHEL 8 | 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | babel ol 8 | 0:2.5.1-9.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | idle-python2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [idle-python2.7 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python2.7-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | idle-python3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [idle-python3.6 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python3.6-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | libpython2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [libpython2.7 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | libpython2.7-minimal Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [libpython2.7-minimal 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-minimal-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | libpython2.7-stdlib Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [libpython2.7-stdlib 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-stdlib-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | libpython2.7-testsuite Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [libpython2.7-testsuite 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-testsuite-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | libpython3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [libpython3.6 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | libpython3.6-minimal Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [libpython3.6-minimal 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-minimal-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | libpython3.6-stdlib Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [libpython3.6-stdlib 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-stdlib-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | libpython3.6-testsuite Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [libpython3.6-testsuite 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-testsuite-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | platform-python RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | platform-python ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | platform-python-debug RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | platform-python-debug ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | platform-python-devel RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | platform-python-devel ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | python-nose-docs RHEL 8 | 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python-nose-docs ol 8 | 0:1.3.7-30.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python-psycopg2-doc RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python-psycopg2-doc ol 8 | 0:2.7.5-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python-sqlalchemy-doc RHEL 8 | 0:1.3.2-1.module+el8.1.0+2994+98e054d6 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python-sqlalchemy-doc ol 8 | 0:1.3.2-1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2 RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2 ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-Cython RHEL 8 | 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-Cython ol 8 | 0:0.28.1-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-PyMySQL RHEL 8 | 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-PyMySQL ol 8 | 0:0.8.0-10.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-attrs RHEL 8 | 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-attrs ol 8 | 0:17.4.0-10.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-babel RHEL 8 | 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-babel ol 8 | 0:2.5.1-9.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-backports RHEL 8 | 0:1.0-15.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-backports ol 8 | 0:1.0-15.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-backports-ssl_match_hostname RHEL 8 | 0:3.5.0.1-11.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-backports-ssl_match_hostname ol 8 | 0:3.5.0.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-bson RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-bson ol 8 | 0:3.6.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-chardet RHEL 8 | 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-chardet ol 8 | 0:3.0.4-10.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-coverage RHEL 8 | 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-coverage ol 8 | 0:4.5.1-4.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-debug RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-debug ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-devel RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-devel ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-dns RHEL 8 | 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-dns ol 8 | 0:1.15.0-10.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-docs RHEL 8 | 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-docs ol 8 | 0:2.7.16-2.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-docs-info RHEL 8 | 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-docs-info ol 8 | 0:2.7.16-2.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-docutils RHEL 8 | 0:0.14-12.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-docutils ol 8 | 0:0.14-12.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-funcsigs RHEL 8 | 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-funcsigs ol 8 | 0:1.0.2-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-idna RHEL 8 | 0:2.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-idna ol 8 | 0:2.5-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-ipaddress RHEL 8 | 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-ipaddress ol 8 | 0:1.0.18-6.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-jinja2 RHEL 8 | 0:2.10-8.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-jinja2 ol 8 | 0:2.10-8.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-libs RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-libs ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-lxml RHEL 8 | 0:4.2.3-3.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-lxml ol 8 | 0:4.2.3-3.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-markupsafe RHEL 8 | 0:0.23-19.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-markupsafe ol 8 | 0:0.23-19.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-mock RHEL 8 | 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-mock ol 8 | 0:2.0.0-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-nose RHEL 8 | 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-nose ol 8 | 0:1.3.7-30.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-numpy RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-numpy ol 8 | 1:1.14.2-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-numpy-doc RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-numpy-doc ol 8 | 1:1.14.2-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-numpy-f2py RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-numpy-f2py ol 8 | 1:1.14.2-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pip RHEL 8 | 0:9.0.3-16.module+el8.2.0+5478+b505947e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pip ol 8 | 0:9.0.3-16.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pip-wheel RHEL 8 | 0:9.0.3-16.module+el8.2.0+5478+b505947e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pip-wheel ol 8 | 0:9.0.3-16.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pluggy RHEL 8 | 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pluggy ol 8 | 0:0.6.0-8.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-psycopg2 RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-psycopg2 ol 8 | 0:2.7.5-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-psycopg2-debug RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-psycopg2-debug ol 8 | 0:2.7.5-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-psycopg2-tests RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-psycopg2-tests ol 8 | 0:2.7.5-7.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-py RHEL 8 | 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-py ol 8 | 0:1.5.3-6.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pygments RHEL 8 | 0:2.2.0-20.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pygments ol 8 | 0:2.2.0-20.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pymongo RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pymongo ol 8 | 0:3.6.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pymongo-gridfs RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pymongo-gridfs ol 8 | 0:3.6.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pysocks RHEL 8 | 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pysocks ol 8 | 0:1.6.8-6.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pytest RHEL 8 | 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pytest ol 8 | 0:3.4.2-13.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pytest-mock RHEL 8 | 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pytest-mock ol 8 | 0:1.9.0-4.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pytz RHEL 8 | 0:2017.2-12.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pytz ol 8 | 0:2017.2-12.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-pyyaml RHEL 8 | 0:3.12-16.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pyyaml ol 8 | 0:3.12-16.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-requests RHEL 8 | 0:2.20.0-3.module+el8.2.0+4577+feefd9b8 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-requests ol 8 | 0:2.20.0-3.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-rpm-macros RHEL 8 | 0:3-38.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-rpm-macros ol 8 | 0:3-38.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-scipy RHEL 8 | 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-scipy ol 8 | 0:1.0.0-20.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-setuptools RHEL 8 | 0:39.0.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-setuptools ol 8 | 0:39.0.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-setuptools-wheel RHEL 8 | 0:39.0.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-setuptools-wheel ol 8 | 0:39.0.1-11.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-setuptools_scm RHEL 8 | 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-setuptools_scm ol 8 | 0:1.15.7-6.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-six RHEL 8 | 0:1.11.0-5.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-six ol 8 | 0:1.11.0-5.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-sqlalchemy RHEL 8 | 0:1.3.2-1.module+el8.1.0+2994+98e054d6 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-sqlalchemy ol 8 | 0:1.3.2-1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-test RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-test ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-tkinter RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-tkinter ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-tools RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-tools ol 8 | 0:2.7.17-1.0.1.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-urllib3 RHEL 8 | 0:1.24.2-1.module+el8.1.0+3280+19512f10 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-urllib3 ol 8 | 0:1.24.2-1.0.2.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-virtualenv RHEL 8 | 0:15.1.0-19.module+el8.1.0+3507+d69c168d | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-virtualenv ol 8 | 0:15.1.0-19.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-wheel RHEL 8 | 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-wheel ol 8 | 1:0.31.1-2.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2-wheel-wheel RHEL 8 | 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-wheel-wheel ol 8 | 1:0.31.1-2.module+el8.2.0+5577+bb63ba72 | [ELSA-2020-1605](https://patchblox.com/security/data/fix/linux/elsa-2020-1605.md) | May 5, 2020 |
| Linux | python2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [python2.7 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | python2.7-examples Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [python2.7-examples 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-examples-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | python2.7-minimal Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [python2.7-minimal 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-minimal-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | python3-idle RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | python3-idle ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | python3-libs RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | python3-libs ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | python3-test RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | python3-test ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | python3-tkinter RHEL 8 | 0:3.6.8-23.el8 | [RHSA-2020:1764](https://patchblox.com/security/data/fix/linux/rhsa-2020-1764.md) | Apr 28, 2020 |
| Linux | python3-tkinter ol 8 | 0:3.6.8-23.0.1.el8 | [ELSA-2020-1764](https://patchblox.com/security/data/fix/linux/elsa-2020-1764.md) | May 5, 2020 |
| Linux | python3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [python3.6 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | python3.6-examples Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [python3.6-examples 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-examples-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | python3.6-minimal Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [python3.6-minimal 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-minimal-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | python3.6-venv Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [python3.6-venv 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-venv-3.6.8-1-18.04.3.md) | Sep 27, 2019 |

## No fix yet

| Platform | Product | Status |
|---|---|---|
| Windows apps | Python 3.5 | no-fix |
| Windows apps | Python 3.6 | no-fix |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.