# CVE-2019-9948: Python 3.6 and 2 others: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2019-9948 is fixed in 87 products on 2 platforms, first by Python 3.7 3.7.4, released July 8, 2019. 2 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2019-9948
- Priority: High
- CVSS: 9.1 (Moderate)
- EPSS: 0.1184
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 22, 2019
- Weakness: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2019-9948

## Description

urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Python 3.7 | 3.7.4 | [Python 3.7 3.7.4](https://patchblox.com/security/data/fix/windows-app/python.python.3.7-3.7.4.md) | Jul 8, 2019 |
| Linux | babel RHEL 8 | 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | babel ol 8 | 0:2.5.1-9.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | idle-python2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [idle-python2.7 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python2.7-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | idle-python3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [idle-python3.6 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python3.6-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | libpython2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [libpython2.7 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | libpython2.7-minimal Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [libpython2.7-minimal 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-minimal-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | libpython2.7-stdlib Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [libpython2.7-stdlib 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-stdlib-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | libpython2.7-testsuite Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [libpython2.7-testsuite 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-testsuite-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | libpython3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [libpython3.6 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | libpython3.6-minimal Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [libpython3.6-minimal 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-minimal-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | libpython3.6-stdlib Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [libpython3.6-stdlib 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-stdlib-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | libpython3.6-testsuite Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [libpython3.6-testsuite 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-testsuite-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | platform-python RHEL 8 | 0:3.6.8-15.1.el8 | [RHSA-2019:3520](https://patchblox.com/security/data/fix/linux/rhsa-2019-3520.md) | Nov 5, 2019 |
| Linux | platform-python ol 8 | 0:3.6.8-15.1.0.1.el8 | [ELSA-2019-3520](https://patchblox.com/security/data/fix/linux/elsa-2019-3520.md) | Nov 14, 2019 |
| Linux | platform-python-debug RHEL 8 | 0:3.6.8-15.1.el8 | [RHSA-2019:3520](https://patchblox.com/security/data/fix/linux/rhsa-2019-3520.md) | Nov 5, 2019 |
| Linux | platform-python-debug ol 8 | 0:3.6.8-15.1.0.1.el8 | [ELSA-2019-3520](https://patchblox.com/security/data/fix/linux/elsa-2019-3520.md) | Nov 14, 2019 |
| Linux | platform-python-devel RHEL 8 | 0:3.6.8-15.1.el8 | [RHSA-2019:3520](https://patchblox.com/security/data/fix/linux/rhsa-2019-3520.md) | Nov 5, 2019 |
| Linux | platform-python-devel ol 8 | 0:3.6.8-15.1.0.1.el8 | [ELSA-2019-3520](https://patchblox.com/security/data/fix/linux/elsa-2019-3520.md) | Nov 14, 2019 |
| Linux | python-nose-docs RHEL 8 | 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python-nose-docs ol 8 | 0:1.3.7-30.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python-psycopg2-doc RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python-psycopg2-doc ol 8 | 0:2.7.5-7.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python-sqlalchemy-doc RHEL 8 | 0:1.3.2-1.module+el8.1.0+2994+98e054d6 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python-sqlalchemy-doc ol 8 | 0:1.3.2-1.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2 RHEL 8 | 0:2.7.16-12.module+el8.1.0+4148+33a50073 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2 ol 8 | 0:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-Cython RHEL 8 | 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-Cython ol 8 | 0:0.28.1-7.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-PyMySQL RHEL 8 | 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-PyMySQL ol 8 | 0:0.8.0-10.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-attrs RHEL 8 | 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-attrs ol 8 | 0:17.4.0-10.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-babel RHEL 8 | 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-babel ol 8 | 0:2.5.1-9.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-backports RHEL 8 | 0:1.0-15.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-backports ol 8 | 0:1.0-15.0.1.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-backports-ssl_match_hostname RHEL 8 | 0:3.5.0.1-11.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-backports-ssl_match_hostname ol 8 | 0:3.5.0.1-11.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-bson RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-bson ol 8 | 0:3.6.1-11.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-chardet RHEL 8 | 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-chardet ol 8 | 0:3.0.4-10.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-coverage RHEL 8 | 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-coverage ol 8 | 0:4.5.1-4.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-debug RHEL 8 | 0:2.7.16-12.module+el8.1.0+4148+33a50073 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-debug ol 8 | 0:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-devel RHEL 8 | 0:2.7.16-12.module+el8.1.0+4148+33a50073 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-devel ol 8 | 0:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-dns RHEL 8 | 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-dns ol 8 | 0:1.15.0-10.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-docs RHEL 8 | 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-docs ol 8 | 0:2.7.16-2.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-docs-info RHEL 8 | 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-docs-info ol 8 | 0:2.7.16-2.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-docutils RHEL 8 | 0:0.14-12.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-docutils ol 8 | 0:0.14-12.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-funcsigs RHEL 8 | 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-funcsigs ol 8 | 0:1.0.2-13.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-idna RHEL 8 | 0:2.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-idna ol 8 | 0:2.5-7.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-ipaddress RHEL 8 | 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-ipaddress ol 8 | 0:1.0.18-6.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-jinja2 RHEL 8 | 0:2.10-8.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-jinja2 ol 8 | 0:2.10-8.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-libs RHEL 8 | 0:2.7.16-12.module+el8.1.0+4148+33a50073 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-libs ol 8 | 0:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-lxml RHEL 8 | 0:4.2.3-3.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-lxml ol 8 | 0:4.2.3-3.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-markupsafe RHEL 8 | 0:0.23-19.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-markupsafe ol 8 | 0:0.23-19.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-mock RHEL 8 | 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-mock ol 8 | 0:2.0.0-13.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-nose RHEL 8 | 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-nose ol 8 | 0:1.3.7-30.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-numpy RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-numpy ol 8 | 1:1.14.2-13.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-numpy-doc RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-numpy-doc ol 8 | 1:1.14.2-13.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-numpy-f2py RHEL 8 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-numpy-f2py ol 8 | 1:1.14.2-13.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pip RHEL 8 | 0:9.0.3-14.module+el8.1.0+3446+c3d52da3 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pip ol 8 | 0:9.0.3-14.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pip-wheel RHEL 8 | 0:9.0.3-14.module+el8.1.0+3446+c3d52da3 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pip-wheel ol 8 | 0:9.0.3-14.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pluggy RHEL 8 | 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pluggy ol 8 | 0:0.6.0-8.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-psycopg2 RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-psycopg2 ol 8 | 0:2.7.5-7.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-psycopg2-debug RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-psycopg2-debug ol 8 | 0:2.7.5-7.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-psycopg2-tests RHEL 8 | 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-psycopg2-tests ol 8 | 0:2.7.5-7.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-py RHEL 8 | 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-py ol 8 | 0:1.5.3-6.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pygments RHEL 8 | 0:2.2.0-20.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pygments ol 8 | 0:2.2.0-20.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pymongo RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pymongo ol 8 | 0:3.6.1-11.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pymongo-gridfs RHEL 8 | 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pymongo-gridfs ol 8 | 0:3.6.1-11.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pysocks RHEL 8 | 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pysocks ol 8 | 0:1.6.8-6.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pytest RHEL 8 | 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pytest ol 8 | 0:3.4.2-13.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pytest-mock RHEL 8 | 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pytest-mock ol 8 | 0:1.9.0-4.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pytz RHEL 8 | 0:2017.2-12.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pytz ol 8 | 0:2017.2-12.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-pyyaml RHEL 8 | 0:3.12-16.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-pyyaml ol 8 | 0:3.12-16.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-requests RHEL 8 | 0:2.20.0-2.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-requests ol 8 | 0:2.20.0-2.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-rpm-macros RHEL 8 | 0:3-38.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-rpm-macros ol 8 | 0:3-38.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-scipy RHEL 8 | 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-scipy ol 8 | 0:1.0.0-20.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-setuptools RHEL 8 | 0:39.0.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-setuptools ol 8 | 0:39.0.1-11.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-setuptools-wheel RHEL 8 | 0:39.0.1-11.module+el8.1.0+3446+c3d52da3 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-setuptools-wheel ol 8 | 0:39.0.1-11.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-setuptools_scm RHEL 8 | 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-setuptools_scm ol 8 | 0:1.15.7-6.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-six RHEL 8 | 0:1.11.0-5.module+el8.1.0+3111+de3f2d8e | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-six ol 8 | 0:1.11.0-5.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-sqlalchemy RHEL 8 | 0:1.3.2-1.module+el8.1.0+2994+98e054d6 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-sqlalchemy ol 8 | 0:1.3.2-1.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-test RHEL 8 | 0:2.7.16-12.module+el8.1.0+4148+33a50073 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-test ol 8 | 0:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-tkinter RHEL 8 | 0:2.7.16-12.module+el8.1.0+4148+33a50073 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-tkinter ol 8 | 0:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-tools RHEL 8 | 0:2.7.16-12.module+el8.1.0+4148+33a50073 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-tools ol 8 | 0:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-urllib3 RHEL 8 | 0:1.24.2-1.module+el8.1.0+3280+19512f10 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-urllib3 ol 8 | 0:1.24.2-1.0.2.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-virtualenv RHEL 8 | 0:15.1.0-19.module+el8.1.0+3507+d69c168d | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-virtualenv ol 8 | 0:15.1.0-19.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-wheel RHEL 8 | 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-wheel ol 8 | 1:0.31.1-2.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2-wheel-wheel RHEL 8 | 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 | [RHSA-2019:3335](https://patchblox.com/security/data/fix/linux/rhsa-2019-3335.md) | Nov 5, 2019 |
| Linux | python2-wheel-wheel ol 8 | 1:0.31.1-2.module+el8.1.0+5396+a4103ad2 | [ELSA-2019-3335](https://patchblox.com/security/data/fix/linux/elsa-2019-3335.md) | Nov 14, 2019 |
| Linux | python2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [python2.7 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | python2.7-examples Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [python2.7-examples 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-examples-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | python2.7-minimal Ubuntu 18.04.6 LTS (bionic) | 2.7.15-4ubuntu4~18.04.1 | [python2.7-minimal 2.7.15-4ubuntu4~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-minimal-2.7.15-4ubuntu4-18.04.1.md) | Jul 12, 2019 |
| Linux | python3-idle RHEL 8 | 0:3.6.8-15.1.el8 | [RHSA-2019:3520](https://patchblox.com/security/data/fix/linux/rhsa-2019-3520.md) | Nov 5, 2019 |
| Linux | python3-idle ol 8 | 0:3.6.8-15.1.0.1.el8 | [ELSA-2019-3520](https://patchblox.com/security/data/fix/linux/elsa-2019-3520.md) | Nov 14, 2019 |
| Linux | python3-libs RHEL 8 | 0:3.6.8-15.1.el8 | [RHSA-2019:3520](https://patchblox.com/security/data/fix/linux/rhsa-2019-3520.md) | Nov 5, 2019 |
| Linux | python3-libs ol 8 | 0:3.6.8-15.1.0.1.el8 | [ELSA-2019-3520](https://patchblox.com/security/data/fix/linux/elsa-2019-3520.md) | Nov 14, 2019 |
| Linux | python3-test RHEL 8 | 0:3.6.8-15.1.el8 | [RHSA-2019:3520](https://patchblox.com/security/data/fix/linux/rhsa-2019-3520.md) | Nov 5, 2019 |
| Linux | python3-test ol 8 | 0:3.6.8-15.1.0.1.el8 | [ELSA-2019-3520](https://patchblox.com/security/data/fix/linux/elsa-2019-3520.md) | Nov 14, 2019 |
| Linux | python3-tkinter RHEL 8 | 0:3.6.8-15.1.el8 | [RHSA-2019:3520](https://patchblox.com/security/data/fix/linux/rhsa-2019-3520.md) | Nov 5, 2019 |
| Linux | python3-tkinter ol 8 | 0:3.6.8-15.1.0.1.el8 | [ELSA-2019-3520](https://patchblox.com/security/data/fix/linux/elsa-2019-3520.md) | Nov 14, 2019 |
| Linux | python3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [python3.6 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | python3.6-examples Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [python3.6-examples 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-examples-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | python3.6-minimal Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [python3.6-minimal 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-minimal-3.6.8-1-18.04.2.md) | Jul 12, 2019 |
| Linux | python3.6-venv Ubuntu 18.04.6 LTS (bionic) | 3.6.8-1~18.04.2 | [python3.6-venv 3.6.8-1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-venv-3.6.8-1-18.04.2.md) | Jul 12, 2019 |

## No fix yet

| Platform | Product | Status |
|---|---|---|
| Windows apps | Python 3.5 | no-fix |
| Windows apps | Python 3.6 | no-fix |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.