CVE catalog

CVE-2017-1000158

Security update for python

[CVE catalog]

CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)

Severity
High · CVSS 8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
7.94% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Suselinux enterprise workstation extension 12 sp3python-base2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise software development kit 12 sp3python-base2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise software development kit 11 sp4python2.6.9-40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise software development kit 11 sp4python-base2.6.9-40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise software development kit 11 sp4python-doc2.6-8.40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise server for sap applications 12 sp3python2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise server for sap applications 12 sp3python-base2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise server for sap applications 12 sp3python-doc2.7.13-28.3.3UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise server for sap applications 11 sp4python2.6.9-40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise server for sap applications 11 sp4python-base2.6.9-40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise server for sap applications 11 sp4python-doc2.6-8.40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise server 12 sp3python2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]

Showing 12 observations. All 98 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Alpine3.4python2.7.14-r0UnknownSource applicability is not established[ALPINE-CVE-2017-1000158]
Alpine3.5python22.7.14-r0UnknownSource applicability is not established[ALPINE-CVE-2017-1000158]
Alpine3.6python22.7.14-r0UnknownSource applicability is not established[ALPINE-CVE-2017-1000158]
Debian11python2.72.7.13-4UnknownSource applicability is not established[DEBIAN-CVE-2017-1000158]
Debian7python2.62.6.8-1.1UnknownSource applicability is not established[DLA-1190-1]
Debian7python2.62.6.8-1.1+deb7u1UnknownSource applicability is not established[DLA-1190-1]
Debian7python2.72.7.3-6UnknownSource applicability is not established[DLA-1189-1]
Debian7python2.72.7.3-6+deb7u1UnknownSource applicability is not established[DLA-1189-1]
Debian7python2.72.7.3-6+deb7u2UnknownSource applicability is not established[DLA-1189-1]
Debian7python2.72.7.3-6+deb7u3UnknownSource applicability is not established[DLA-1189-1]
Debian7python2.72.7.3-6+deb7u4UnknownSource applicability is not established[DLA-1189-1]
Debian8python2.72.7.9-2UnknownSource applicability is not established[DLA-1519-1]
Debian8python2.72.7.9-2+deb8u1UnknownSource applicability is not established[DLA-1519-1]
Debian8python2.72.7.9-2+deb8u2UnknownSource applicability is not established[DLA-1519-1]
Debian8python3.43.4.2-1UnknownSource applicability is not established[DLA-1520-1]
Debian8python3.43.4.2-1+deb8u1UnknownSource applicability is not established[DLA-1520-1]
Debian9python3.53.5.3-1UnknownSource applicability is not established[DSA-4307-1]
Debian9python3.53.5.3-1+deb9u1UnknownSource applicability is not established[DSA-4307-1]
Suseenterprise storage 5python2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise desktop 12 sp3python2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise desktop 12 sp3python-base2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise server 11 sp4python2.6.9-40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise server 11 sp4python-base2.6.9-40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise server 11 sp4python-doc2.6-8.40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise server 12 sp3python2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise server 12 sp3python-base2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise server 12 sp3python-doc2.7.13-28.3.3UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise server for sap applications 11 sp4python2.6.9-40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise server for sap applications 11 sp4python-base2.6.9-40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise server for sap applications 11 sp4python-doc2.6-8.40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise server for sap applications 12 sp3python2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise server for sap applications 12 sp3python-base2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise server for sap applications 12 sp3python-doc2.7.13-28.3.3UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise software development kit 11 sp4python2.6.9-40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise software development kit 11 sp4python-base2.6.9-40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise software development kit 11 sp4python-doc2.6-8.40.3.1UnknownSource applicability is not established[SUSE-SU-2018:0768-1]
Suselinux enterprise software development kit 12 sp3python-base2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Suselinux enterprise workstation extension 12 sp3python-base2.7.13-28.3.2UnknownSource applicability is not established[SUSE-SU-2018:1372-1]
Ubuntu14.04python2.72.7.5-8ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.5-8ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-2UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-3UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-3ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-4UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-4ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-5UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-7UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-8UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-8ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-8ubuntu0.3UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python2.72.7.6-8ubuntu0.4UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu14.04python3.43.4.0-1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4.0-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4.0-2ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4.3-1ubuntu1~14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4.3-1ubuntu1~14.04.3UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4.3-1ubuntu1~14.04.4UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4.3-1ubuntu1~14.04.5UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4.3-1ubuntu1~14.04.6UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4~b1-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4~b1-4ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4~b1-4ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4~b1-5ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4~b2-1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4~b3-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4~rc1-1build1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4~rc2-1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.43.4~rc3-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu14.04python3.53.5.2-2ubuntu0~16.04.4~14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158]
Ubuntu16.04python2.72.7.10-4ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python2.72.7.10-4ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python2.72.7.11-2UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python2.72.7.11-3UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python2.72.7.11-4UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python2.72.7.11-6UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python2.72.7.11-7UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python2.72.7.11-7ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python2.72.7.12-1ubuntu0~16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python2.72.7.12-1ubuntu0~16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python2.72.7.12-1~16.04UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-1]
Ubuntu16.04python3.53.5.0-3UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.0-3ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.1-1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.1-10UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.1-2UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.1-3UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.1-5UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.1-6ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.1-6ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.1-9ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.1~rc1-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.2-2ubuntu0~16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.2-2ubuntu0~16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.2-2ubuntu0~16.04.3UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.2-2ubuntu0~16.04.4UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.2-2~16.01UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Ubuntu16.04python3.53.5.2-2~16.04UnknownSource applicability is not established[UBUNTU-CVE-2017-1000158][USN-3496-3]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "python2.7",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-4"
            }
          ]
        }
      ],
      "release": "11",
      "versions": [],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DEBIAN-CVE-2017-1000158",
      "fixed_version": "2.7.13-4",
      "provider_source": "pypi",
      "provider_record_id": "DEBIAN-CVE-2017-1000158",
      "provider_updated_at": "2026-08-04T05:48:01.154252038Z",
      "applicability_unknown": true
    },
    {
      "name": "python",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "3.4.0"
            },
            {
              "fixed": "2.7.14-r0"
            }
          ]
        }
      ],
      "release": "3.4",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2017-1000158",
      "fixed_version": "2.7.14-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2017-1000158",
      "provider_updated_at": "2026-07-08T04:30:08.755807195Z",
      "applicability_unknown": true
    },
    {
      "name": "python2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.14-r0"
            }
          ]
        }
      ],
      "release": "3.5",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2017-1000158",
      "fixed_version": "2.7.14-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2017-1000158",
      "provider_updated_at": "2026-07-08T04:30:08.755807195Z",
      "applicability_unknown": true
    },
    {
      "name": "python2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.14-r0"
            }
          ]
        }
      ],
      "release": "3.6",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2017-1000158",
      "fixed_version": "2.7.14-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2017-1000158",
      "provider_updated_at": "2026-07-08T04:30:08.755807195Z",
      "applicability_unknown": true
    },
    {
      "name": "python2.7",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.6-8ubuntu0.4"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "2.7.5-8ubuntu3",
        "2.7.5-8ubuntu4",
        "2.7.6-2",
        "2.7.6-2ubuntu1",
        "2.7.6-3",
        "2.7.6-3ubuntu1",
        "2.7.6-4",
        "2.7.6-4ubuntu1",
        "2.7.6-5",
        "2.7.6-7",
        "2.7.6-8",
        "2.7.6-8ubuntu0.2",
        "2.7.6-8ubuntu0.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000158",
      "fixed_version": "2.7.6-8ubuntu0.4",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2017-1000158",
      "provider_updated_at": "2026-04-22T11:08:29.822442Z",
      "applicability_unknown": true
    },
    {
      "name": "python3.4",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.3-1ubuntu1~14.04.6"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "3.4~b1-0ubuntu3",
        "3.4~b1-4ubuntu4",
        "3.4~b1-4ubuntu6",
        "3.4~b1-5ubuntu2",
        "3.4~b2-1",
        "3.4~b3-1ubuntu1",
        "3.4~rc1-1build1",
        "3.4~rc2-1",
        "3.4~rc3-0ubuntu1",
        "3.4.0-1",
        "3.4.0-2ubuntu1",
        "3.4.0-2ubuntu1.1",
        "3.4.3-1ubuntu1~14.04.1",
        "3.4.3-1ubuntu1~14.04.3",
        "3.4.3-1ubuntu1~14.04.4",
        "3.4.3-1ubuntu1~14.04.5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000158",
      "fixed_version": "3.4.3-1ubuntu1~14.04.6",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2017-1000158",
      "provider_updated_at": "2026-04-22T11:08:29.822442Z",
      "applicability_unknown": true
    },
    {
      "name": "python3.5",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.5.2-2ubuntu0~16.04.4~14.04.1"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000158",
      "fixed_version": "3.5.2-2ubuntu0~16.04.4~14.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2017-1000158",
      "provider_updated_at": "2026-04-22T11:08:29.822442Z",
      "applicability_unknown": true
    },
    {
      "name": "python2.7",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.12-1ubuntu0~16.04.2"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "2.7.10-4ubuntu1",
        "2.7.10-4ubuntu2",
        "2.7.11-2",
        "2.7.11-3",
        "2.7.11-4",
        "2.7.11-6",
        "2.7.11-7",
        "2.7.11-7ubuntu1",
        "2.7.12-1~16.04",
        "2.7.12-1ubuntu0~16.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000158",
      "fixed_version": "2.7.12-1ubuntu0~16.04.2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2017-1000158",
      "provider_updated_at": "2026-04-22T11:08:29.822442Z",
      "applicability_unknown": true
    },
    {
      "name": "python3.5",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.5.2-2ubuntu0~16.04.4"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "3.5.0-3",
        "3.5.0-3ubuntu1",
        "3.5.1~rc1-2ubuntu1",
        "3.5.1-1",
        "3.5.1-2",
        "3.5.1-3",
        "3.5.1-5",
        "3.5.1-6ubuntu1",
        "3.5.1-6ubuntu2",
        "3.5.1-9ubuntu1",
        "3.5.1-10",
        "3.5.2-2~16.01",
        "3.5.2-2~16.04",
        "3.5.2-2ubuntu0~16.04.1",
        "3.5.2-2ubuntu0~16.04.2",
        "3.5.2-2ubuntu0~16.04.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000158",
      "fixed_version": "3.5.2-2ubuntu0~16.04.4",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2017-1000158",
      "provider_updated_at": "2026-04-22T11:08:29.822442Z",
      "applicability_unknown": true
    },
    {
      "name": "python3.4",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.3-1ubuntu1~14.04.6"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "3.4~b1-0ubuntu3",
        "3.4~b1-4ubuntu4",
        "3.4~b1-4ubuntu6",
        "3.4~b1-5ubuntu2",
        "3.4~b2-1",
        "3.4~b3-1ubuntu1",
        "3.4~rc1-1build1",
        "3.4~rc2-1",
        "3.4~rc3-0ubuntu1",
        "3.4.0-1",
        "3.4.0-2ubuntu1",
        "3.4.0-2ubuntu1.1",
        "3.4.3-1ubuntu1~14.04.1",
        "3.4.3-1ubuntu1~14.04.3",
        "3.4.3-1ubuntu1~14.04.4",
        "3.4.3-1ubuntu1~14.04.5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-3496-3",
      "fixed_version": "3.4.3-1ubuntu1~14.04.6",
      "provider_source": "pypi",
      "provider_record_id": "USN-3496-3",
      "provider_updated_at": "2026-04-22T09:41:03.093783Z",
      "applicability_unknown": true
    },
    {
      "name": "python3.5",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.5.2-2ubuntu0~16.04.4"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "3.5.0-3",
        "3.5.0-3ubuntu1",
        "3.5.1~rc1-2ubuntu1",
        "3.5.1-1",
        "3.5.1-2",
        "3.5.1-3",
        "3.5.1-5",
        "3.5.1-6ubuntu1",
        "3.5.1-6ubuntu2",
        "3.5.1-9ubuntu1",
        "3.5.1-10",
        "3.5.2-2~16.01",
        "3.5.2-2~16.04",
        "3.5.2-2ubuntu0~16.04.1",
        "3.5.2-2ubuntu0~16.04.2",
        "3.5.2-2ubuntu0~16.04.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-3496-3",
      "fixed_version": "3.5.2-2ubuntu0~16.04.4",
      "provider_source": "pypi",
      "provider_record_id": "USN-3496-3",
      "provider_updated_at": "2026-04-22T09:41:03.093783Z",
      "applicability_unknown": true
    },
    {
      "name": "python2.7",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.6-8ubuntu0.4"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "2.7.5-8ubuntu3",
        "2.7.5-8ubuntu4",
        "2.7.6-2",
        "2.7.6-2ubuntu1",
        "2.7.6-3",
        "2.7.6-3ubuntu1",
        "2.7.6-4",
        "2.7.6-4ubuntu1",
        "2.7.6-5",
        "2.7.6-7",
        "2.7.6-8",
        "2.7.6-8ubuntu0.2",
        "2.7.6-8ubuntu0.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-3496-1",
      "fixed_version": "2.7.6-8ubuntu0.4",
      "provider_source": "pypi",
      "provider_record_id": "USN-3496-1",
      "provider_updated_at": "2026-04-22T09:40:44.138299Z",
      "applicability_unknown": true
    },
    {
      "name": "python2.7",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.12-1ubuntu0~16.04.2"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "2.7.10-4ubuntu1",
        "2.7.10-4ubuntu2",
        "2.7.11-2",
        "2.7.11-3",
        "2.7.11-4",
        "2.7.11-6",
        "2.7.11-7",
        "2.7.11-7ubuntu1",
        "2.7.12-1~16.04",
        "2.7.12-1ubuntu0~16.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-3496-1",
      "fixed_version": "2.7.12-1ubuntu0~16.04.2",
      "provider_source": "pypi",
      "provider_record_id": "USN-3496-1",
      "provider_updated_at": "2026-04-22T09:40:44.138299Z",
      "applicability_unknown": true
    },
    {
      "name": "python3.5",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.5.3-1+deb9u1"
            }
          ]
        }
      ],
      "release": "9",
      "versions": [
        "3.5.3-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DSA-4307-1",
      "fixed_version": "3.5.3-1+deb9u1",
      "provider_source": "pypi",
      "provider_record_id": "DSA-4307-1",
      "provider_updated_at": "2026-03-09T02:10:05.687311Z",
      "applicability_unknown": true
    },
    {
      "name": "python3.4",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-1+deb8u1"
            }
          ]
        }
      ],
      "release": "8",
      "versions": [
        "3.4.2-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DLA-1520-1",
      "fixed_version": "3.4.2-1+deb8u1",
      "provider_source": "pypi",
      "provider_record_id": "DLA-1520-1",
      "provider_updated_at": "2026-03-09T01:22:08.926252Z",
      "applicability_unknown": true
    },
    {
      "name": "python2.7",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.9-2+deb8u2"
            }
          ]
        }
      ],
      "release": "8",
      "versions": [
        "2.7.9-2",
        "2.7.9-2+deb8u1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DLA-1519-1",
      "fixed_version": "2.7.9-2+deb8u2",
      "provider_source": "pypi",
      "provider_record_id": "DLA-1519-1",
      "provider_updated_at": "2026-03-09T01:02:00.778330Z",
      "applicability_unknown": true
    },
    {
      "name": "python2.7",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.3-6+deb7u4"
            }
          ]
        }
      ],
      "release": "7",
      "versions": [
        "2.7.3-6",
        "2.7.3-6+deb7u1",
        "2.7.3-6+deb7u2",
        "2.7.3-6+deb7u3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DLA-1189-1",
      "fixed_version": "2.7.3-6+deb7u4",
      "provider_source": "pypi",
      "provider_record_id": "DLA-1189-1",
      "provider_updated_at": "2026-03-09T01:01:32.322620Z",
      "applicability_unknown": true
    },
    {
      "name": "python2.6",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.8-1.1+deb7u1"
            }
          ]
        }
      ],
      "release": "7",
      "versions": [
        "2.6.8-1.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DLA-1190-1",
      "fixed_version": "2.6.8-1.1+deb7u1",
      "provider_source": "pypi",
      "provider_record_id": "DLA-1190-1",
      "provider_updated_at": "2026-03-09T01:01:23.608698Z",
      "applicability_unknown": true
    },
    {
      "name": "python",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.2"
            }
          ]
        }
      ],
      "release": "linux enterprise desktop 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-base",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.2"
            }
          ]
        }
      ],
      "release": "linux enterprise desktop 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-base",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.2"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-base",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-doc",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.3"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-base",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-doc",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.3"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python-base",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.2"
            }
          ]
        }
      ],
      "release": "linux enterprise workstation extension 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.13-28.3.2"
            }
          ]
        }
      ],
      "release": "enterprise storage 5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:1372-1",
      "fixed_version": "2.7.13-28.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:1372-1",
      "provider_updated_at": "2026-02-04T04:34:03.426867Z",
      "applicability_unknown": true
    },
    {
      "name": "python",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.9-40.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0768-1",
      "fixed_version": "2.6.9-40.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0768-1",
      "provider_updated_at": "2026-02-04T03:28:41.820352Z",
      "applicability_unknown": true
    },
    {
      "name": "python-base",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.9-40.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0768-1",
      "fixed_version": "2.6.9-40.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0768-1",
      "provider_updated_at": "2026-02-04T03:28:41.820352Z",
      "applicability_unknown": true
    },
    {
      "name": "python-doc",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6-8.40.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0768-1",
      "fixed_version": "2.6-8.40.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0768-1",
      "provider_updated_at": "2026-02-04T03:28:41.820352Z",
      "applicability_unknown": true
    },
    {
      "name": "python",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.9-40.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0768-1",
      "fixed_version": "2.6.9-40.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0768-1",
      "provider_updated_at": "2026-02-04T03:28:41.820352Z",
      "applicability_unknown": true
    },
    {
      "name": "python-base",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.9-40.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0768-1",
      "fixed_version": "2.6.9-40.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0768-1",
      "provider_updated_at": "2026-02-04T03:28:41.820352Z",
      "applicability_unknown": true
    },
    {
      "name": "python-doc",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6-8.40.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0768-1",
      "fixed_version": "2.6-8.40.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0768-1",
      "provider_updated_at": "2026-02-04T03:28:41.820352Z",
      "applicability_unknown": true
    },
    {
      "name": "python",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.9-40.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0768-1",
      "fixed_version": "2.6.9-40.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0768-1",
      "provider_updated_at": "2026-02-04T03:28:41.820352Z",
      "applicability_unknown": true
    },
    {
      "name": "python-base",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.9-40.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0768-1",
      "fixed_version": "2.6.9-40.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0768-1",
      "provider_updated_at": "2026-02-04T03:28:41.820352Z",
      "applicability_unknown": true
    },
    {
      "name": "python-doc",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6-8.40.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 11 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2018:0768-1",
      "fixed_version": "2.6-8.40.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2018:0768-1",
      "provider_updated_at": "2026-02-04T03:28:41.820352Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]