Windows apps · Application version · October 20, 2018

Python 3.7 3.7.1

Python 3.7 3.7.1, released October 20, 2018, fixes 5 CVEs in Python 3.7. None of them is reported as exploited. Patch Radar priority: High. The latest Python 3.7 is 3.7.9, which also fixes every one of these CVEs.

High

Superseded. The latest Python 3.7 is 3.7.9, which also fixes every CVE on this page. Install that instead.

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

7.5

Base score, 0 to 10

Highest EPSS

0.1091

95th percentile

Priority of the 5 CVEs

Patch now 0
                                Urgent 0
                                High 4
                                Routine 1

Applies to

Product	Version
Python 3.7	3.7.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2018-14647	Python 3.6 and 2 others: Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization.	7.5	0.1091	None reported
High	CVE-2018-20406	Python 3.6 and 2 others: Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is…	7.5	0.0579	None reported
High	CVE-2018-1061	Python 3.5 and 2 others: python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking…	7.5	0.0474	None reported
High	CVE-2019-17514	Python 3.6 and 2 others: library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information…	7.5	0.0467	None reported
Routine	CVE-2018-1000117	Python 3.5 and 2 others: Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow…	6.7	0.0104	None reported

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.