# CVE-2020-1747: python38: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...

CVE-2020-1747 is fixed in 42 products on 1 platform, first by RHSA-2020:4641, released November 4, 2020. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2020-1747
- Priority: High
- CVSS: 9.8 (Moderate)
- EPSS: 0.0544
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Nov 4, 2020

## Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  The following packages have been upgraded to a later upstream version: python38 (3.8.3). (BZ#1847416)  Security Fix(es):  * PyYAML: command execution through python/object/apply constructor in FullLoader (CVE-2019-20477)  * python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907)  * PyYAML: arbitrary command execution through python/object/new when FullLoader is used (CVE-2020-1747)  * python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS (CVE-2020-8492)  * python: DoS via inefficiency in IPv{4,6}Interface classes (CVE-2020-14422)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | python38 RHEL 8 | 0:3.8.3-3.module+el8.3.0+7680+79e7e61a | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38 ol 8 | 0:3.8.3-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-Cython RHEL 8 | 0:0.29.14-4.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-Cython ol 8 | 0:0.29.14-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-PyMySQL RHEL 8 | 0:0.9.3-3.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-PyMySQL ol 8 | 0:0.9.3-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-asn1crypto RHEL 8 | 0:1.2.0-3.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-asn1crypto ol 8 | 0:1.2.0-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-babel RHEL 8 | 0:2.7.0-10.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-babel ol 8 | 0:2.7.0-10.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-cffi RHEL 8 | 0:1.13.2-3.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-cffi ol 8 | 0:1.13.2-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-chardet RHEL 8 | 0:3.0.4-19.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-chardet ol 8 | 0:3.0.4-19.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-cryptography RHEL 8 | 0:2.8-3.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-cryptography ol 8 | 0:2.8-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-debug RHEL 8 | 0:3.8.3-3.module+el8.3.0+7680+79e7e61a | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-debug ol 8 | 0:3.8.3-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-devel RHEL 8 | 0:3.8.3-3.module+el8.3.0+7680+79e7e61a | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-devel ol 8 | 0:3.8.3-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-idle RHEL 8 | 0:3.8.3-3.module+el8.3.0+7680+79e7e61a | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-idle ol 8 | 0:3.8.3-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-idna RHEL 8 | 0:2.8-6.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-idna ol 8 | 0:2.8-6.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-jinja2 RHEL 8 | 0:2.10.3-4.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-jinja2 ol 8 | 0:2.10.3-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-libs RHEL 8 | 0:3.8.3-3.module+el8.3.0+7680+79e7e61a | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-libs ol 8 | 0:3.8.3-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-lxml RHEL 8 | 0:4.4.1-4.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-lxml ol 8 | 0:4.4.1-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-markupsafe RHEL 8 | 0:1.1.1-6.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-markupsafe ol 8 | 0:1.1.1-6.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-mod_wsgi RHEL 8 | 0:4.6.8-3.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-mod_wsgi ol 8 | 0:4.6.8-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-numpy RHEL 8 | 0:1.17.3-5.module+el8.3.0+7187+a27ec44b | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-numpy ol 8 | 0:1.17.3-5.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-numpy-doc RHEL 8 | 0:1.17.3-5.module+el8.3.0+7187+a27ec44b | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-numpy-doc ol 8 | 0:1.17.3-5.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-numpy-f2py RHEL 8 | 0:1.17.3-5.module+el8.3.0+7187+a27ec44b | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-numpy-f2py ol 8 | 0:1.17.3-5.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-pip RHEL 8 | 0:19.3.1-1.module+el8.3.0+7187+a27ec44b | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-pip ol 8 | 0:19.3.1-1.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-pip-wheel RHEL 8 | 0:19.3.1-1.module+el8.3.0+7187+a27ec44b | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-pip-wheel ol 8 | 0:19.3.1-1.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-ply RHEL 8 | 0:3.11-8.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-ply ol 8 | 0:3.11-8.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-psutil RHEL 8 | 0:5.6.4-3.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-psutil ol 8 | 0:5.6.4-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-psycopg2 RHEL 8 | 0:2.8.4-4.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-psycopg2 ol 8 | 0:2.8.4-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-psycopg2-doc RHEL 8 | 0:2.8.4-4.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-psycopg2-doc ol 8 | 0:2.8.4-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-psycopg2-tests RHEL 8 | 0:2.8.4-4.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-psycopg2-tests ol 8 | 0:2.8.4-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-pycparser RHEL 8 | 0:2.19-3.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-pycparser ol 8 | 0:2.19-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-pysocks RHEL 8 | 0:1.7.1-4.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-pysocks ol 8 | 0:1.7.1-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-pytz RHEL 8 | 0:2019.3-3.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-pytz ol 8 | 0:2019.3-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-pyyaml RHEL 8 | 0:5.3.1-1.module+el8.3.0+7187+a27ec44b | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-pyyaml ol 8 | 0:5.3.1-1.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-requests RHEL 8 | 0:2.22.0-9.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-requests ol 8 | 0:2.22.0-9.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-rpm-macros RHEL 8 | 0:3.8.3-3.module+el8.3.0+7680+79e7e61a | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-rpm-macros ol 8 | 0:3.8.3-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-scipy RHEL 8 | 0:1.3.1-4.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-scipy ol 8 | 0:1.3.1-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-setuptools RHEL 8 | 0:41.6.0-4.module+el8.3.0+7187+a27ec44b | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-setuptools ol 8 | 0:41.6.0-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-setuptools-wheel RHEL 8 | 0:41.6.0-4.module+el8.3.0+7187+a27ec44b | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-setuptools-wheel ol 8 | 0:41.6.0-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-six RHEL 8 | 0:1.12.0-9.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-six ol 8 | 0:1.12.0-9.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-test RHEL 8 | 0:3.8.3-3.module+el8.3.0+7680+79e7e61a | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-test ol 8 | 0:3.8.3-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-tkinter RHEL 8 | 0:3.8.3-3.module+el8.3.0+7680+79e7e61a | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-tkinter ol 8 | 0:3.8.3-3.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-urllib3 RHEL 8 | 0:1.25.7-4.module+el8.2.0+5234+f98739b6 | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-urllib3 ol 8 | 0:1.25.7-4.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-wheel RHEL 8 | 0:0.33.6-5.module+el8.3.0+7187+a27ec44b | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-wheel ol 8 | 0:0.33.6-5.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |
| Linux | python38-wheel-wheel RHEL 8 | 0:0.33.6-5.module+el8.3.0+7187+a27ec44b | [RHSA-2020:4641](https://patchblox.com/security/data/fix/linux/rhsa-2020-4641.md) | Nov 4, 2020 |
| Linux | python38-wheel-wheel ol 8 | 0:0.33.6-5.module+el8.3.0+7824+e0098946 | [ELSA-2020-4641](https://patchblox.com/security/data/fix/linux/elsa-2020-4641.md) | Nov 10, 2020 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.