CVE-2019-16056

06.09.2019, 18:15

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 91%

Affected Products (NVD)

Vendor	Product	Version
python	python	𝑥 ≤ 2.7.16
python	python	3.0.0 ≤ 𝑥 ≤ 3.0.1
python	python	3.1.0 ≤ 𝑥 ≤ 3.1.5
python	python	3.2.0 ≤ 𝑥 ≤ 3.2.6
python	python	3.3.0 ≤ 𝑥 ≤ 3.3.7
python	python	3.4.0 ≤ 𝑥 ≤ 3.4.10
python	python	3.5.0 ≤ 𝑥 ≤ 3.5.7
python	python	3.6.0 ≤ 𝑥 ≤ 3.6.9
python	python	3.7.0 ≤ 𝑥 ≤ 3.7.4
debian	debian_linux	8.0
debian	debian_linux	9.0
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	18.04
canonical	ubuntu_linux	19.04
redhat	software_collections	1.0
oracle	communications_operations_monitor	4.1 ≤ 𝑥 ≤ 4.3
oracle	communications_operations_monitor	3.4
oracle	peoplesoft_enterprise_peopletools	8.57
oracle	peoplesoft_enterprise_peopletools	8.58
oracle	zfs_storage_appliance_kit	8.8
opensuse	leap	15.0
opensuse	leap	15.1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

python2.7

bullseye

2.7.18-8+deb11u1

fixed

Ubuntu Releases

Ubuntu Product

Codename

python2.7

bionic	Fixed 2.7.15-4ubuntu4~18.04.2 released
disco	Fixed 2.7.16-2ubuntu0.2 released
eoan	not-affected
focal	not-affected
groovy	not-affected
hirsute	not-affected
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	Fixed 2.7.6-8ubuntu0.6+esm3 released
xenial	Fixed 2.7.12-1ubuntu0~16.04.9 released

python3.4

bionic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	Fixed 3.4.3-1ubuntu1~14.04.7+esm4 released
xenial	dne

python3.5

bionic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	Fixed 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 released
xenial	Fixed 3.5.2-2ubuntu0~16.04.9 released

python3.6

bionic	Fixed 3.6.8-1~18.04.3 released
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

python3.7

bionic	not-affected
disco	Fixed 3.7.3-2ubuntu0.2 released
eoan	not-affected
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

openSUSE / SLES Releases

openSUSE Product

Release

libpython2_7-1_0

suse enterprise desktop 15	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.1 fixed
suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise sap 15	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 15	2.7.17-7.32.1 fixed
suse enterprise server 15 SP1	2.7.17-7.32.1 fixed
suse enterprise server 15 SP2	2.7.17-7.32.1 fixed
suse enterprise server 15 SP3	2.7.17-7.32.1 fixed

libpython2_7-1_0-32bit

suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed

libpython3_4m1_0

suse enterprise sap 12	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP2	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP3	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP4	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP5	3.4.10-25.52.1 fixed
suse enterprise server 12	3.4.10-25.52.1 fixed
suse enterprise server 12 SP2	3.4.10-25.52.1 fixed
suse enterprise server 12 SP3	3.4.10-25.52.1 fixed
suse enterprise server 12 SP4	3.4.10-25.52.1 fixed
suse enterprise server 12 SP5	3.4.10-25.52.1 fixed

libpython3_4m1_0-32bit

suse enterprise sap 12 SP5	3.4.10-25.52.1 fixed
suse enterprise server 12 SP5	3.4.10-25.52.1 fixed

libpython3_6m1_0

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.53.1 fixed
suse enterprise desktop 15 SP2	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP3	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise desktop 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise desktop 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise desktop 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise sap 12 SP5	3.6.12-4.22.2 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.53.1 fixed
suse enterprise sap 15 SP2	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP3	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise sap 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise sap 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise sap 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise server 12 SP3	3.6.8-6.14.1 fixed
suse enterprise server 12 SP5	3.6.12-4.22.2 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.53.1 fixed
suse enterprise server 15 SP2	3.6.9-3.39.1 fixed
suse enterprise server 15 SP3	3.6.9-3.39.1 fixed
suse enterprise server 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise server 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise server 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise server 15 SP7	3.6.15-150300.10.84.1 fixed

python

suse enterprise desktop 15	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.2 fixed
suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise sap 15	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.2 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 15	2.7.17-7.32.2 fixed
suse enterprise server 15 SP1	2.7.17-7.32.2 fixed
suse enterprise server 15 SP2	2.7.17-7.32.2 fixed
suse enterprise server 15 SP3	2.7.17-7.32.2 fixed

python-32bit

suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed

python-base

suse enterprise desktop 15	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.1 fixed
suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise sap 15	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 15	2.7.17-7.32.1 fixed
suse enterprise server 15 SP1	2.7.17-7.32.1 fixed
suse enterprise server 15 SP2	2.7.17-7.32.1 fixed
suse enterprise server 15 SP3	2.7.17-7.32.1 fixed

python-base-32bit

suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed

python-curses

suse enterprise desktop 15	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.2 fixed
suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise sap 15	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.2 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 15	2.7.17-7.32.2 fixed
suse enterprise server 15 SP1	2.7.17-7.32.2 fixed
suse enterprise server 15 SP2	2.7.17-7.32.2 fixed
suse enterprise server 15 SP3	2.7.17-7.32.2 fixed

python-demo

suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed

python-devel

suse enterprise desktop 15	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.1 fixed
suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise sap 15	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 15	2.7.17-7.32.1 fixed
suse enterprise server 15 SP1	2.7.17-7.32.1 fixed
suse enterprise server 15 SP2	2.7.17-7.32.1 fixed
suse enterprise server 15 SP3	2.7.17-7.32.1 fixed

python-doc

suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed

python-doc-pdf

suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed

python-gdbm

suse enterprise desktop 15	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.2 fixed
suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise sap 15	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.2 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 15	2.7.17-7.32.2 fixed
suse enterprise server 15 SP1	2.7.17-7.32.2 fixed
suse enterprise server 15 SP2	2.7.17-7.32.2 fixed
suse enterprise server 15 SP3	2.7.17-7.32.2 fixed

python-idle

suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed

python-tk

suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed

python-xml

suse enterprise desktop 15	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.1 fixed
suse enterprise sap 12 SP5	2.7.13-28.36.1 fixed
suse enterprise sap 15	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.1 fixed
suse enterprise server 12 SP3	2.7.13-28.36.1 fixed
suse enterprise server 12 SP5	2.7.13-28.36.1 fixed
suse enterprise server 15	2.7.17-7.32.1 fixed
suse enterprise server 15 SP1	2.7.17-7.32.1 fixed
suse enterprise server 15 SP2	2.7.17-7.32.1 fixed
suse enterprise server 15 SP3	2.7.17-7.32.1 fixed

python3

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.53.1 fixed
suse enterprise desktop 15 SP2	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP3	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise desktop 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise desktop 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise desktop 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise sap 12	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP2	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP3	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP4	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP5	3.4.10-25.52.1 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.53.1 fixed
suse enterprise sap 15 SP2	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP3	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise sap 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise sap 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise sap 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise server 12	3.4.10-25.52.1 fixed
suse enterprise server 12 SP2	3.4.10-25.52.1 fixed
suse enterprise server 12 SP3	3.4.10-25.52.1 fixed
suse enterprise server 12 SP4	3.4.10-25.52.1 fixed
suse enterprise server 12 SP5	3.4.10-25.52.1 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.53.1 fixed
suse enterprise server 15 SP2	3.6.9-3.39.1 fixed
suse enterprise server 15 SP3	3.6.9-3.39.1 fixed
suse enterprise server 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise server 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise server 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise server 15 SP7	3.6.15-150300.10.84.1 fixed

python3-base

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.53.1 fixed
suse enterprise desktop 15 SP2	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP3	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise desktop 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise desktop 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise desktop 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise sap 12	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP2	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP3	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP4	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP5	3.4.10-25.52.1 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.53.1 fixed
suse enterprise sap 15 SP2	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP3	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise sap 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise sap 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise sap 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise server 12	3.4.10-25.52.1 fixed
suse enterprise server 12 SP2	3.4.10-25.52.1 fixed
suse enterprise server 12 SP3	3.4.10-25.52.1 fixed
suse enterprise server 12 SP4	3.4.10-25.52.1 fixed
suse enterprise server 12 SP5	3.4.10-25.52.1 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.53.1 fixed
suse enterprise server 15 SP2	3.6.9-3.39.1 fixed
suse enterprise server 15 SP3	3.6.9-3.39.1 fixed
suse enterprise server 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise server 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise server 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise server 15 SP7	3.6.15-150300.10.84.1 fixed

python3-curses

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.53.1 fixed
suse enterprise desktop 15 SP2	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP3	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise desktop 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise desktop 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise desktop 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise sap 12	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP2	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP3	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP4	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP5	3.4.10-25.52.1 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.53.1 fixed
suse enterprise sap 15 SP2	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP3	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise sap 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise sap 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise sap 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise server 12	3.4.10-25.52.1 fixed
suse enterprise server 12 SP2	3.4.10-25.52.1 fixed
suse enterprise server 12 SP3	3.4.10-25.52.1 fixed
suse enterprise server 12 SP4	3.4.10-25.52.1 fixed
suse enterprise server 12 SP5	3.4.10-25.52.1 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.53.1 fixed
suse enterprise server 15 SP2	3.6.9-3.39.1 fixed
suse enterprise server 15 SP3	3.6.9-3.39.1 fixed
suse enterprise server 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise server 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise server 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise server 15 SP7	3.6.15-150300.10.84.1 fixed

python3-dbm

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.53.1 fixed
suse enterprise desktop 15 SP2	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP3	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise desktop 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise desktop 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise desktop 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.53.1 fixed
suse enterprise sap 15 SP2	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP3	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise sap 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise sap 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise sap 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.53.1 fixed
suse enterprise server 15 SP2	3.6.9-3.39.1 fixed
suse enterprise server 15 SP3	3.6.9-3.39.1 fixed
suse enterprise server 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise server 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise server 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise server 15 SP7	3.6.15-150300.10.84.1 fixed

python3-devel

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.53.1 fixed
suse enterprise desktop 15 SP2	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP3	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise desktop 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise desktop 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise desktop 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise sap 12 SP2	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP3	3.4.10-25.52.1 fixed
suse enterprise sap 12 SP5	3.4.10-25.52.1 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.53.1 fixed
suse enterprise sap 15 SP2	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP3	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise sap 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise sap 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise sap 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise server 12 SP2	3.4.10-25.52.1 fixed
suse enterprise server 12 SP3	3.4.10-25.52.1 fixed
suse enterprise server 12 SP4	3.4.10-25.52.1 fixed
suse enterprise server 12 SP5	3.4.10-25.52.1 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.53.1 fixed
suse enterprise server 15 SP2	3.6.9-3.39.1 fixed
suse enterprise server 15 SP3	3.6.9-3.39.1 fixed
suse enterprise server 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise server 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise server 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise server 15 SP7	3.6.15-150300.10.84.1 fixed

python3-idle

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.53.1 fixed
suse enterprise desktop 15 SP2	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP3	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise desktop 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise desktop 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise desktop 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.53.1 fixed
suse enterprise sap 15 SP2	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP3	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise sap 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise sap 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise sap 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.53.1 fixed
suse enterprise server 15 SP2	3.6.9-3.39.1 fixed
suse enterprise server 15 SP3	3.6.9-3.39.1 fixed
suse enterprise server 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise server 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise server 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise server 15 SP7	3.6.15-150300.10.84.1 fixed

python3-testsuite

suse enterprise desktop 15 SP1	3.6.10-3.53.1 fixed
suse enterprise sap 15 SP1	3.6.10-3.53.1 fixed
suse enterprise server 15 SP1	3.6.10-3.53.1 fixed

python3-tk

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.53.1 fixed
suse enterprise desktop 15 SP2	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP3	3.6.9-3.39.1 fixed
suse enterprise desktop 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise desktop 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise desktop 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise desktop 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise sap 12 SP5	3.4.10-25.52.1 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.53.1 fixed
suse enterprise sap 15 SP2	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP3	3.6.9-3.39.1 fixed
suse enterprise sap 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise sap 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise sap 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise sap 15 SP7	3.6.15-150300.10.84.1 fixed
suse enterprise server 12 SP5	3.4.10-25.52.1 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.53.1 fixed
suse enterprise server 15 SP2	3.6.9-3.39.1 fixed
suse enterprise server 15 SP3	3.6.9-3.39.1 fixed
suse enterprise server 15 SP4	3.6.15-150300.10.21.1 fixed
suse enterprise server 15 SP5	3.6.15-150300.10.45.1 fixed
suse enterprise server 15 SP6	3.6.15-150300.10.60.1 fixed
suse enterprise server 15 SP7	3.6.15-150300.10.84.1 fixed

python36

suse enterprise sap 12 SP5	3.6.12-4.22.2 fixed
suse enterprise server 12 SP3	3.6.8-6.14.1 fixed
suse enterprise server 12 SP5	3.6.12-4.22.2 fixed

python36-base

suse enterprise sap 12 SP5	3.6.12-4.22.2 fixed
suse enterprise server 12 SP3	3.6.8-6.14.1 fixed
suse enterprise server 12 SP5	3.6.12-4.22.2 fixed

python36-curses

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-dbm

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-devel

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-doc

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-idle

suse enterprise server 12 SP3

3.6.8-6.6.1

fixed

python36-testsuite

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-tk

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-tools

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

platform-python

RHEL 8

0:3.6.8-23.el8

fixed

platform-python-debug

RHEL 8

0:3.6.8-23.el8

fixed

platform-python-devel

RHEL 8

0:3.6.8-23.el8

fixed

python

RHEL 7

0:2.7.5-88.el7

fixed

python-debug

RHEL 7

0:2.7.5-88.el7

fixed

python-devel

RHEL 7

0:2.7.5-88.el7

fixed

python-libs

RHEL 7

0:2.7.5-88.el7

fixed

python-test

RHEL 7

0:2.7.5-88.el7

fixed

python-tools

RHEL 7

0:2.7.5-88.el7

fixed

python3

RHEL 7

0:3.6.8-13.el7

fixed

python3-debug

RHEL 7

0:3.6.8-13.el7

fixed

python3-devel

RHEL 7

0:3.6.8-13.el7

fixed

python3-idle

RHEL 7	0:3.6.8-13.el7 fixed
RHEL 8	0:3.6.8-23.el8 fixed

python3-libs

RHEL 7	0:3.6.8-13.el7 fixed
RHEL 8	0:3.6.8-23.el8 fixed

python3-test

RHEL 7	0:3.6.8-13.el7 fixed
RHEL 8	0:3.6.8-23.el8 fixed

python3-tkinter

RHEL 7	0:3.6.8-13.el7 fixed
RHEL 8	0:3.6.8-23.el8 fixed

tkinter

RHEL 7

0:2.7.5-88.el7

fixed

Amazon Linux Releases

Amazon Package

Release

python

Amazon Linux 2

0:2.7.16-4.amzn2

fixed

python-debug

Amazon Linux 2

0:2.7.16-4.amzn2

fixed

python-debuginfo

Amazon Linux 2

0:2.7.16-4.amzn2

fixed

python-devel

Amazon Linux 2

0:2.7.16-4.amzn2

fixed

python-libs

Amazon Linux 2

0:2.7.16-4.amzn2

fixed

python-test

Amazon Linux 2

0:2.7.16-4.amzn2

fixed

python-tools

Amazon Linux 2

0:2.7.16-4.amzn2

fixed

python27

Amazon Linux 1

0:2.7.16-1.130.amzn1

fixed

python27-debuginfo

Amazon Linux 1

0:2.7.16-1.130.amzn1

fixed

python27-devel

Amazon Linux 1

0:2.7.16-1.130.amzn1

fixed

python27-libs

Amazon Linux 1

0:2.7.16-1.130.amzn1

fixed

python27-test

Amazon Linux 1

0:2.7.16-1.130.amzn1

fixed

python27-tools

Amazon Linux 1

0:2.7.16-1.130.amzn1

fixed

python3

Amazon Linux 2

0:3.7.4-1.amzn2.0.3

fixed

python3-debug

Amazon Linux 2

0:3.7.4-1.amzn2.0.3

fixed

python3-debuginfo

Amazon Linux 2

0:3.7.4-1.amzn2.0.3

fixed

python3-devel

Amazon Linux 2

0:3.7.4-1.amzn2.0.3

fixed

python3-libs

Amazon Linux 2

0:3.7.4-1.amzn2.0.3

fixed

python3-test

Amazon Linux 2

0:3.7.4-1.amzn2.0.3

fixed

python3-tkinter

Amazon Linux 2

0:3.7.4-1.amzn2.0.3

fixed

python3-tools

Amazon Linux 2

0:3.7.4-1.amzn2.0.3

fixed

python34

Amazon Linux 1

0:3.4.10-1.49.amzn1

fixed

python34-debuginfo

Amazon Linux 1

0:3.4.10-1.49.amzn1

fixed

python34-devel

Amazon Linux 1

0:3.4.10-1.49.amzn1

fixed

python34-libs

Amazon Linux 1

0:3.4.10-1.49.amzn1

fixed

python34-test

Amazon Linux 1

0:3.4.10-1.49.amzn1

fixed

python34-tools

Amazon Linux 1

0:3.4.10-1.49.amzn1

fixed

python35

Amazon Linux 1

0:3.5.7-1.24.amzn1

fixed

python35-debuginfo

Amazon Linux 1

0:3.5.7-1.24.amzn1

fixed

python35-devel

Amazon Linux 1

0:3.5.7-1.24.amzn1

fixed

python35-libs

Amazon Linux 1

0:3.5.7-1.24.amzn1

fixed

python35-test

Amazon Linux 1

0:3.5.7-1.24.amzn1

fixed

python35-tools

Amazon Linux 1

0:3.5.7-1.24.amzn1

fixed

python36

Amazon Linux 1

0:3.6.8-1.15.amzn1

fixed

python36-debug

Amazon Linux 1

0:3.6.8-1.15.amzn1

fixed

python36-debuginfo

Amazon Linux 1

0:3.6.8-1.15.amzn1

fixed

python36-devel

Amazon Linux 1

0:3.6.8-1.15.amzn1

fixed

python36-libs

Amazon Linux 1

0:3.6.8-1.15.amzn1

fixed

python36-test

Amazon Linux 1

0:3.6.8-1.15.amzn1

fixed

python36-tools

Amazon Linux 1

0:3.6.8-1.15.amzn1

fixed

tkinter

Amazon Linux 2

0:2.7.16-4.amzn2

fixed

References

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html

https://access.redhat.com/errata/RHSA-2019:3725

https://access.redhat.com/errata/RHSA-2019:3948

https://bugs.python.org/issue34155

https://github.com/python/cpython/commit/8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9

https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E

https://lists.debian.org/debian-lts-announce/2019/09/msg00018.html

https://lists.debian.org/debian-lts-announce/2019/09/msg00019.html

https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html

https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4KZEFP6E4YPYB52AF4WXCUDSGQOTF37/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QASRD4E2G65GGEHYKVHYCXB2XWAGTNL4/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QP46PQSUKYPGWTADQ67NOV3BUN6JM34Z/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDQQ56P7ZZR64XV5DUVWNSNXKKEXUG2J/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/

https://security.netapp.com/advisory/ntap-20190926-0005/

https://usn.ubuntu.com/4151-1/

https://usn.ubuntu.com/4151-2/

https://www.oracle.com/security-alerts/cpuapr2020.html

https://www.oracle.com/security-alerts/cpujul2020.html

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html

https://access.redhat.com/errata/RHSA-2019:3725

https://access.redhat.com/errata/RHSA-2019:3948

https://bugs.python.org/issue34155

https://github.com/python/cpython/commit/8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9

https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E

https://lists.debian.org/debian-lts-announce/2019/09/msg00018.html

https://lists.debian.org/debian-lts-announce/2019/09/msg00019.html

https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html

https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4KZEFP6E4YPYB52AF4WXCUDSGQOTF37/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QASRD4E2G65GGEHYKVHYCXB2XWAGTNL4/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QP46PQSUKYPGWTADQ67NOV3BUN6JM34Z/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDQQ56P7ZZR64XV5DUVWNSNXKKEXUG2J/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/

https://security.netapp.com/advisory/ntap-20190926-0005/

https://usn.ubuntu.com/4151-1/

https://usn.ubuntu.com/4151-2/

https://www.oracle.com/security-alerts/cpuapr2020.html

https://www.oracle.com/security-alerts/cpujul2020.html