# CVE-2019-16935: Python 3.6 and 2 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2019-16935 is fixed in 87 products on 2 platforms, first by idle-python2.7 2.7.15-4ubuntu4~18.04.2, released September 27, 2019. 2 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2019-16935
- Priority: Routine
- CVSS: 6.1 (Moderate)
- EPSS: 0.0465
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 27, 2019
- Weakness: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2019-16935

## Description

The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Python 3.7 | 3.7.5 | [Python 3.7 3.7.5](https://patchblox.com/security/data/fix/windows-app/python.python.3.7-3.7.5.md) | Oct 14, 2019 |
| Linux | babel RHEL 8 | 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | idle-python2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [idle-python2.7 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python2.7-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | idle-python3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [idle-python3.6 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python3.6-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | libpython2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [libpython2.7 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | libpython2.7-minimal Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [libpython2.7-minimal 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-minimal-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | libpython2.7-stdlib Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [libpython2.7-stdlib 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-stdlib-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | libpython2.7-testsuite Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [libpython2.7-testsuite 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-testsuite-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | libpython3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [libpython3.6 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | libpython3.6-minimal Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [libpython3.6-minimal 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-minimal-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | libpython3.6-stdlib Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [libpython3.6-stdlib 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-stdlib-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | libpython3.6-testsuite Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [libpython3.6-testsuite 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-testsuite-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | platform-python RHEL 8 | 0:3.6.8-31.el8 | [RHSA-2020:4433](https://patchblox.com/security/data/fix/linux/rhsa-2020-4433.md) | Nov 4, 2020 |
| Linux | platform-python ol 8 | 0:3.6.8-31.0.1.el8 | [ELSA-2020-4433](https://patchblox.com/security/data/fix/linux/elsa-2020-4433.md) | Nov 10, 2020 |
| Linux | platform-python-debug RHEL 8 | 0:3.6.8-31.el8 | [RHSA-2020:4433](https://patchblox.com/security/data/fix/linux/rhsa-2020-4433.md) | Nov 4, 2020 |
| Linux | platform-python-debug ol 8 | 0:3.6.8-31.0.1.el8 | [ELSA-2020-4433](https://patchblox.com/security/data/fix/linux/elsa-2020-4433.md) | Nov 10, 2020 |
| Linux | platform-python-devel RHEL 8 | 0:3.6.8-31.el8 | [RHSA-2020:4433](https://patchblox.com/security/data/fix/linux/rhsa-2020-4433.md) | Nov 4, 2020 |
| Linux | platform-python-devel ol 8 | 0:3.6.8-31.0.1.el8 | [ELSA-2020-4433](https://patchblox.com/security/data/fix/linux/elsa-2020-4433.md) | Nov 10, 2020 |
| Linux | python-nose-docs RHEL 8 | 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python-psycopg2-doc RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python-sqlalchemy-doc RHEL 8 | 0:1.3.2-1.module+el8.1.0+2994+98e054d6 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2 RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-Cython RHEL 8 | 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-PyMySQL RHEL 8 | 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-attrs RHEL 8 | 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-babel RHEL 8 | 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-backports RHEL 8 | 0:1.0-15.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-backports-ssl_match_hostname RHEL 8 | 0:3.5.0.1-11.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-bson RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-chardet RHEL 8 | 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-coverage RHEL 8 | 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-debug RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-devel RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-dns RHEL 8 | 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-docs RHEL 8 | 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-docs-info RHEL 8 | 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-docutils RHEL 8 | 0:0.14-12.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-funcsigs RHEL 8 | 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-idna RHEL 8 | 0:2.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-ipaddress RHEL 8 | 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-jinja2 RHEL 8 | 0:2.10-8.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-libs RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-lxml RHEL 8 | 0:4.2.3-3.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-markupsafe RHEL 8 | 0:0.23-19.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-mock RHEL 8 | 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-nose RHEL 8 | 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-numpy RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-numpy-doc RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-numpy-f2py RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pip RHEL 8 | 0:9.0.3-16.module+el8.2.0+5478+b505947e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pip-wheel RHEL 8 | 0:9.0.3-16.module+el8.2.0+5478+b505947e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pluggy RHEL 8 | 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-psycopg2 RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-psycopg2-debug RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-psycopg2-tests RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-py RHEL 8 | 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pygments RHEL 8 | 0:2.2.0-20.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pymongo RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pymongo-gridfs RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pysocks RHEL 8 | 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pytest RHEL 8 | 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pytest-mock RHEL 8 | 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pytz RHEL 8 | 0:2017.2-12.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-pyyaml RHEL 8 | 0:3.12-16.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-requests RHEL 8 | 0:2.20.0-3.module+el8.2.0+4577+feefd9b8 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-rpm-macros RHEL 8 | 0:3-38.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-scipy RHEL 8 | 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-setuptools RHEL 8 | 0:39.0.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-setuptools-wheel RHEL 8 | 0:39.0.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-setuptools_scm RHEL 8 | 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-six RHEL 8 | 0:1.11.0-5.module+el8.1.0+3111+de3f2d8e | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-sqlalchemy RHEL 8 | 0:1.3.2-1.module+el8.1.0+2994+98e054d6 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-test RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-tkinter RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-tools RHEL 8 | 0:2.7.17-1.module+el8.2.0+4561+f4e0d66a | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-urllib3 RHEL 8 | 0:1.24.2-1.module+el8.1.0+3280+19512f10 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-virtualenv RHEL 8 | 0:15.1.0-19.module+el8.1.0+3507+d69c168d | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-wheel RHEL 8 | 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2-wheel-wheel RHEL 8 | 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 | [RHSA-2020:1605](https://patchblox.com/security/data/fix/linux/rhsa-2020-1605.md) | Apr 28, 2020 |
| Linux | python2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [python2.7 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | python2.7-examples Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [python2.7-examples 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-examples-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | python2.7-minimal Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.2 | [python2.7-minimal 2.7.15-4ubuntu4~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-minimal-2.7.15-4ubuntu4-18.04.2.md) | Sep 27, 2019 |
| Linux | python3-idle RHEL 8 | 0:3.6.8-31.el8 | [RHSA-2020:4433](https://patchblox.com/security/data/fix/linux/rhsa-2020-4433.md) | Nov 4, 2020 |
| Linux | python3-idle ol 8 | 0:3.6.8-31.0.1.el8 | [ELSA-2020-4433](https://patchblox.com/security/data/fix/linux/elsa-2020-4433.md) | Nov 10, 2020 |
| Linux | python3-libs RHEL 8 | 0:3.6.8-31.el8 | [RHSA-2020:4433](https://patchblox.com/security/data/fix/linux/rhsa-2020-4433.md) | Nov 4, 2020 |
| Linux | python3-libs ol 8 | 0:3.6.8-31.0.1.el8 | [ELSA-2020-4433](https://patchblox.com/security/data/fix/linux/elsa-2020-4433.md) | Nov 10, 2020 |
| Linux | python3-test RHEL 8 | 0:3.6.8-31.el8 | [RHSA-2020:4433](https://patchblox.com/security/data/fix/linux/rhsa-2020-4433.md) | Nov 4, 2020 |
| Linux | python3-test ol 8 | 0:3.6.8-31.0.1.el8 | [ELSA-2020-4433](https://patchblox.com/security/data/fix/linux/elsa-2020-4433.md) | Nov 10, 2020 |
| Linux | python3-tkinter RHEL 8 | 0:3.6.8-31.el8 | [RHSA-2020:4433](https://patchblox.com/security/data/fix/linux/rhsa-2020-4433.md) | Nov 4, 2020 |
| Linux | python3-tkinter ol 8 | 0:3.6.8-31.0.1.el8 | [ELSA-2020-4433](https://patchblox.com/security/data/fix/linux/elsa-2020-4433.md) | Nov 10, 2020 |
| Linux | python3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [python3.6 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | python3.6-examples Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [python3.6-examples 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-examples-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | python3.6-minimal Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [python3.6-minimal 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-minimal-3.6.8-1-18.04.3.md) | Sep 27, 2019 |
| Linux | python3.6-venv Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.3 | [python3.6-venv 3.6.8-1~18.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-venv-3.6.8-1-18.04.3.md) | Sep 27, 2019 |

## No fix yet

| Platform | Product | Status |
|---|---|---|
| Windows apps | Python 3.5 | no-fix |
| Windows apps | Python 3.6 | no-fix |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.