CVE catalog
CVE-2019-16056
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. A
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 5.12% · Oct 27, 2026
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Cpe | python | Not reported | Not reported | unknown |
| Cpe | python | Not reported | Not reported | unknown |
| Cpe | python | Not reported | Not reported | unknown |
| Cpe | python | Not reported | Not reported | unknown |
| Cpe | python | Not reported | Not reported | unknown |
| Cpe | python | Not reported | Not reported | unknown |
| Cpe | python | Not reported | Not reported | unknown |
| Cpe | python | Not reported | Not reported | unknown |
| Cpe | python | Not reported | Not reported | unknown |
| Cpe | fedora | Not reported | Not reported | unknown |
| Cpe | fedora | Not reported | Not reported | unknown |
| Cpe | fedora | Not reported | Not reported | unknown |
| Cpe | debian_linux | Not reported | Not reported | unknown |
| Cpe | debian_linux | Not reported | Not reported | unknown |
| Cpe | ubuntu_linux | Not reported | Not reported | unknown |
| Cpe | ubuntu_linux | Not reported | Not reported | unknown |
| Cpe | ubuntu_linux | Not reported | Not reported | unknown |
| Cpe | ubuntu_linux | Not reported | Not reported | unknown |
| Cpe | ubuntu_linux | Not reported | Not reported | unknown |
| Cpe | software_collections | Not reported | Not reported | unknown |
| Ubuntu | python2.7 | 16.04 | 2.7.10-4ubuntu1 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.10-4ubuntu2 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-2 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-3 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-4 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-6 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-7 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-7ubuntu1 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1~16.04 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.1 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.2 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.3 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.4 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.8 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.9 | fixed |
| Ubuntu | python3.5 | 16.04 | 3.5.0-3 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.0-3ubuntu1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1~rc1-2ubuntu1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-2 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-3 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-5 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-6ubuntu1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-6ubuntu2 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-9ubuntu1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-10 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2~16.01 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2~16.04 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.2 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.3 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.4 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.5 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.8 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.9 | fixed |
| Ubuntu | python2.7 | 18.04 | 2.7.14-2ubuntu2 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.14-4 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.14-6 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.14-7 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.14-8 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.15~rc1-1 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.15~rc1-1ubuntu0.1 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.15-4ubuntu4~18.04 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.15-4ubuntu4~18.04.1 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.15-4ubuntu4~18.04.2 | fixed |
| Ubuntu | python3.6 | 18.04 | 3.6.3-1ubuntu1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4~rc1-1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4~rc1-2 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4-1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4-2 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4-3build1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4-4 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.5~rc1-1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.5-3 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.6-1~18.04 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.7-1~18.04 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.8-1~18.04.1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.8-1~18.04.2 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.8-1~18.04.3 | fixed |
| Ubuntu | python2.7 | pro | 2.7.5-8ubuntu3 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.5-8ubuntu4 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-2 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-2ubuntu1 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-3 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-3ubuntu1 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-4 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-4ubuntu1 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-5 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-7 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.2 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.3 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.4 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.5 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.6+esm2 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.6+esm3 | fixed |
| Ubuntu | python3.4 | pro | 3.4~b1-0ubuntu3 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~b1-4ubuntu4 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~b1-4ubuntu6 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~b1-5ubuntu2 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~b2-1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~b3-1ubuntu1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~rc1-1build1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~rc2-1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~rc3-0ubuntu1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.0-1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.0-2ubuntu1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.0-2ubuntu1.1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.3 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.4 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.5 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.6 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.7 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.7+esm2 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.7+esm4 | fixed |
| Ubuntu | python2.7 | pro | 2.7.5-8ubuntu3 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.5-8ubuntu4 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-2 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-2ubuntu1 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-3 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-3ubuntu1 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-4 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-4ubuntu1 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-5 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-7 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.2 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.3 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.4 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.5 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.6+esm2 | vulnerable |
| Ubuntu | python2.7 | pro | 2.7.6-8ubuntu0.6+esm3 | fixed |
| Ubuntu | python3.4 | pro | 3.4~b1-0ubuntu3 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~b1-4ubuntu4 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~b1-4ubuntu6 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~b1-5ubuntu2 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~b2-1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~b3-1ubuntu1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~rc1-1build1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~rc2-1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4~rc3-0ubuntu1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.0-1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.0-2ubuntu1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.0-2ubuntu1.1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.1 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.3 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.4 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.5 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.6 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.7 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.7+esm2 | vulnerable |
| Ubuntu | python3.4 | pro | 3.4.3-1ubuntu1~14.04.7+esm4 | fixed |
| Ubuntu | python3.5 | pro | 3.5.2-2ubuntu0~16.04.4~14.04.1 | vulnerable |
| Ubuntu | python3.5 | pro | 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 | fixed |
| Ubuntu | python2.7 | 16.04 | 2.7.10-4ubuntu1 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.10-4ubuntu2 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-2 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-3 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-4 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-6 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-7 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.11-7ubuntu1 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1~16.04 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.1 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.2 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.3 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.4 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.8 | vulnerable |
| Ubuntu | python2.7 | 16.04 | 2.7.12-1ubuntu0~16.04.9 | fixed |
| Ubuntu | python3.5 | 16.04 | 3.5.0-3 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.0-3ubuntu1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1~rc1-2ubuntu1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-2 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-3 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-5 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-6ubuntu1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-6ubuntu2 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-9ubuntu1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.1-10 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2~16.01 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2~16.04 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.1 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.2 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.3 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.4 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.5 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.8 | vulnerable |
| Ubuntu | python3.5 | 16.04 | 3.5.2-2ubuntu0~16.04.9 | fixed |
| Ubuntu | python2.7 | 18.04 | 2.7.14-2ubuntu2 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.14-4 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.14-6 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.14-7 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.14-8 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.15~rc1-1 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.15~rc1-1ubuntu0.1 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.15-4ubuntu4~18.04 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.15-4ubuntu4~18.04.1 | vulnerable |
| Ubuntu | python2.7 | 18.04 | 2.7.15-4ubuntu4~18.04.2 | fixed |
| Ubuntu | python3.6 | 18.04 | 3.6.3-1ubuntu1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4~rc1-1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4~rc1-2 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4-1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4-2 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4-3build1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.4-4 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.5~rc1-1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.5-3 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.6-1~18.04 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.7-1~18.04 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.8-1~18.04.1 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.8-1~18.04.2 | vulnerable |
| Ubuntu | python3.6 | 18.04 | 3.6.8-1~18.04.3 | fixed |
| Alpine | python2 | 3.11 | 2.7.16-r3 | fixed |
| Alpine | python2 | 3.12 | 2.7.16-r3 | fixed |
| Alpine | python3 | 3.10 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.11 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.12 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.13 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.14 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.15 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.16 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.17 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.18 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.19 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.20 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.21 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.22 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.23 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.24 | 3.7.5-r0 | fixed |
| Alpine | python3 | 3.7 | 3.6.8-r1 | fixed |
| Alpine | python3 | 3.8 | 3.6.8-r1 | fixed |
| Alpine | python3 | 3.9 | 3.6.9-r1 | fixed |
| Debian | python2.7 | 11 | 2.7.17~rc1-1 | fixed |
| Debian | python2.7 | 8 | 2.7.9-2 | vulnerable |
| Debian | python2.7 | 8 | 2.7.9-2+deb8u1 | vulnerable |
| Debian | python2.7 | 8 | 2.7.9-2+deb8u2 | vulnerable |
| Debian | python2.7 | 8 | 2.7.9-2+deb8u3 | vulnerable |
| Debian | python2.7 | 8 | 2.7.9-2+deb8u4 | vulnerable |
| Debian | python2.7 | 8 | 2.7.9-2+deb8u5 | fixed |
| Debian | python3.4 | 8 | 3.4.2-1 | vulnerable |
| Debian | python3.4 | 8 | 3.4.2-1+deb8u1 | vulnerable |
| Debian | python3.4 | 8 | 3.4.2-1+deb8u2 | vulnerable |
| Debian | python3.4 | 8 | 3.4.2-1+deb8u3 | vulnerable |
| Debian | python3.4 | 8 | 3.4.2-1+deb8u4 | vulnerable |
| Debian | python3.4 | 8 | 3.4.2-1+deb8u5 | vulnerable |
| Debian | python3.4 | 8 | 3.4.2-1+deb8u6 | vulnerable |
| Debian | python3.4 | 8 | 3.4.2-1+deb8u7 | fixed |
| Opensuse | python3 | leap 15.1 | 3.6.9-lp151.6.4.1 | fixed |
| Opensuse | python3-base | leap 15.1 | 3.6.9-lp151.6.4.1 | fixed |
| Suse | python | linux enterprise server 12 sp5 | 2.7.13-28.36.1 | fixed |
| Suse | python-base | linux enterprise server 12 sp5 | 2.7.13-28.36.1 | fixed |
| Suse | python-doc | linux enterprise server 12 sp5 | 2.7.13-28.36.1 | fixed |
| Suse | python | linux enterprise server for sap applications 12 sp5 | 2.7.13-28.36.1 | fixed |
| Suse | python-base | linux enterprise server for sap applications 12 sp5 | 2.7.13-28.36.1 | fixed |
| Suse | python-doc | linux enterprise server for sap applications 12 sp5 | 2.7.13-28.36.1 | fixed |
| Suse | python-base | linux enterprise workstation extension 12 sp5 | 2.7.13-28.36.1 | fixed |
| Suse | python36 | linux enterprise server 12 sp5 | 3.6.12-4.22.2 | fixed |
| Suse | python36-core | linux enterprise server 12 sp5 | 3.6.12-4.22.2 | fixed |
| Suse | python36 | linux enterprise server for sap applications 12 sp5 | 3.6.12-4.22.2 | fixed |
| Suse | python36-core | linux enterprise server for sap applications 12 sp5 | 3.6.12-4.22.2 | fixed |
| Suse | python3 | linux enterprise module for basesystem 15 | 3.6.9-3.39.1 | fixed |
| Suse | python3-base | linux enterprise module for basesystem 15 | 3.6.9-3.39.1 | fixed |
| Suse | python3 | linux enterprise module for basesystem 15 sp1 | 3.6.9-3.39.1 | fixed |
| Suse | python3-base | linux enterprise module for basesystem 15 sp1 | 3.6.9-3.39.1 | fixed |
| Suse | python3-base | linux enterprise module for development tools 15 | 3.6.9-3.39.1 | fixed |
| Suse | python3-base | linux enterprise module for development tools 15 sp1 | 3.6.9-3.39.1 | fixed |
| Suse | python | linux enterprise point of sale 11 sp3 | 2.6.9-40.32.2 | fixed |
| Suse | python-base | linux enterprise point of sale 11 sp3 | 2.6.9-40.32.1 | fixed |
| Suse | python-doc | linux enterprise point of sale 11 sp3 | 2.6-8.40.32.1 | fixed |
| Suse | python | linux enterprise server 11 sp4-ltss | 2.6.9-40.32.2 | fixed |
| Suse | python-base | linux enterprise server 11 sp4-ltss | 2.6.9-40.32.1 | fixed |
| Suse | python-doc | linux enterprise server 11 sp4-ltss | 2.6-8.40.32.1 | fixed |
| Suse | python3 | linux enterprise module for basesystem 15 sp1 | 3.6.10-3.53.1 | fixed |
| Suse | python3-base | linux enterprise module for basesystem 15 sp1 | 3.6.10-3.53.1 | fixed |
| Suse | python3-base | linux enterprise module for development tools 15 sp1 | 3.6.10-3.53.1 | fixed |
| Opensuse | python | leap 15.0 | 2.7.14-lp150.6.21.1 | fixed |
| Opensuse | python3 | leap 15.0 | 3.6.9-lp150.2.14.1 | fixed |
| Opensuse | python3-base | leap 15.0 | 3.6.9-lp150.2.14.1 | fixed |
| Opensuse | python | leap 15.1 | 2.7.14-lp151.10.10.1 | fixed |
| Opensuse | python-base | leap 15.1 | 2.7.14-lp151.10.10.2 | fixed |
| Opensuse | python-doc | leap 15.1 | 2.7.14-lp151.10.10.1 | fixed |
| Suse | python | linux enterprise module for basesystem 15 | 2.7.14-7.24.1 | fixed |
| Suse | python-base | linux enterprise module for basesystem 15 | 2.7.14-7.24.1 | fixed |
| Suse | python | linux enterprise module for basesystem 15 sp1 | 2.7.14-7.24.1 | fixed |
| Suse | python-base | linux enterprise module for basesystem 15 sp1 | 2.7.14-7.24.1 | fixed |
| Suse | python | linux enterprise module for desktop applications 15 | 2.7.14-7.24.1 | fixed |
| Suse | python | linux enterprise module for desktop applications 15 sp1 | 2.7.14-7.24.1 | fixed |
| Suse | python | linux enterprise module for python 2 15 sp1 | 2.7.14-7.24.1 | fixed |
| Suse | python-base | linux enterprise module for python 2 15 sp1 | 2.7.14-7.24.1 | fixed |
| Suse | python | linux enterprise desktop 12 sp4 | 2.7.13-28.36.1 | fixed |
| Suse | python-base | linux enterprise desktop 12 sp4 | 2.7.13-28.36.1 | fixed |
| Suse | python-base | linux enterprise software development kit 12 sp4 | 2.7.13-28.36.1 | fixed |
| Suse | python | linux enterprise server 12 sp4 | 2.7.13-28.36.1 | fixed |
| Suse | python-base | linux enterprise server 12 sp4 | 2.7.13-28.36.1 | fixed |
| Suse | python-doc | linux enterprise server 12 sp4 | 2.7.13-28.36.1 | fixed |
| Suse | python | linux enterprise server for sap applications 12 sp4 | 2.7.13-28.36.1 | fixed |
| Suse | python-base | linux enterprise server for sap applications 12 sp4 | 2.7.13-28.36.1 | fixed |
| Suse | python-doc | linux enterprise server for sap applications 12 sp4 | 2.7.13-28.36.1 | fixed |
| Suse | python-base | linux enterprise workstation extension 12 sp4 | 2.7.13-28.36.1 | fixed |
| Suse | python | enterprise storage 5 | 2.7.13-28.36.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Ubuntu | python2.7 | deb | 16.04 | 2.7.12-1ubuntu0~16.04.9 | Not reported | USN-4151-1 | Not reported |
| Ubuntu | python3.5 | deb | 16.04 | 3.5.2-2ubuntu0~16.04.9 | Not reported | USN-4151-1 | Not reported |
| Ubuntu | python2.7 | deb | 18.04 | 2.7.15-4ubuntu4~18.04.2 | Not reported | USN-4151-1 | Not reported |
| Ubuntu | python3.6 | deb | 18.04 | 3.6.8-1~18.04.3 | Not reported | USN-4151-1 | Not reported |
| Ubuntu | python2.7 | deb | pro | 2.7.6-8ubuntu0.6+esm3 | Not reported | USN-4151-2 | Not reported |
| Ubuntu | python3.4 | deb | pro | 3.4.3-1ubuntu1~14.04.7+esm4 | Not reported | USN-4151-2 | Not reported |
| Ubuntu | python2.7 | deb | pro | 2.7.6-8ubuntu0.6+esm3 | Not reported | UBUNTU-CVE-2019-16056 | Not reported |
| Ubuntu | python3.4 | deb | pro | 3.4.3-1ubuntu1~14.04.7+esm4 | Not reported | UBUNTU-CVE-2019-16056 | Not reported |
| Ubuntu | python3.5 | deb | pro | 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 | Not reported | UBUNTU-CVE-2019-16056 | Not reported |
| Ubuntu | python2.7 | deb | 16.04 | 2.7.12-1ubuntu0~16.04.9 | Not reported | UBUNTU-CVE-2019-16056 | Not reported |
| Ubuntu | python3.5 | deb | 16.04 | 3.5.2-2ubuntu0~16.04.9 | Not reported | UBUNTU-CVE-2019-16056 | Not reported |
| Ubuntu | python2.7 | deb | 18.04 | 2.7.15-4ubuntu4~18.04.2 | Not reported | UBUNTU-CVE-2019-16056 | Not reported |
| Ubuntu | python3.6 | deb | 18.04 | 3.6.8-1~18.04.3 | Not reported | UBUNTU-CVE-2019-16056 | Not reported |
| Alpine | python2 | apk | 3.11 | 2.7.16-r3 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python2 | apk | 3.12 | 2.7.16-r3 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.10 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.11 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.12 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.13 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.14 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.15 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.16 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.17 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.18 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.19 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.20 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.21 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.22 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.23 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.24 | 3.7.5-r0 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.7 | 3.6.8-r1 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.8 | 3.6.8-r1 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Alpine | python3 | apk | 3.9 | 3.6.9-r1 | Not reported | ALPINE-CVE-2019-16056 | Not reported |
| Debian | python2.7 | deb | 11 | 2.7.17~rc1-1 | Not reported | DEBIAN-CVE-2019-16056 | Not reported |
| Debian | python2.7 | deb | 8 | 2.7.9-2+deb8u5 | Not reported | DLA-1925-1 | Not reported |
| Debian | python3.4 | deb | 8 | 3.4.2-1+deb8u7 | Not reported | DLA-1924-1 | Not reported |
| Opensuse | python3 | rpm | leap 15.1 | 3.6.9-lp151.6.4.1 | Not reported | OPENSUSE-SU-2019:2438-1 | Not reported |
| Opensuse | python3-base | rpm | leap 15.1 | 3.6.9-lp151.6.4.1 | Not reported | OPENSUSE-SU-2019:2438-1 | Not reported |
| Suse | python | rpm | linux enterprise server 12 sp5 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-2 | Not reported |
| Suse | python-base | rpm | linux enterprise server 12 sp5 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-2 | Not reported |
| Suse | python-doc | rpm | linux enterprise server 12 sp5 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-2 | Not reported |
| Suse | python | rpm | linux enterprise server for sap applications 12 sp5 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-2 | Not reported |
| Suse | python-base | rpm | linux enterprise server for sap applications 12 sp5 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-2 | Not reported |
| Suse | python-doc | rpm | linux enterprise server for sap applications 12 sp5 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-2 | Not reported |
| Suse | python-base | rpm | linux enterprise workstation extension 12 sp5 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-2 | Not reported |
| Suse | python36 | rpm | linux enterprise server 12 sp5 | 3.6.12-4.22.2 | Not reported | SUSE-SU-2020:3563-1 | Not reported |
| Suse | python36-core | rpm | linux enterprise server 12 sp5 | 3.6.12-4.22.2 | Not reported | SUSE-SU-2020:3563-1 | Not reported |
| Suse | python36 | rpm | linux enterprise server for sap applications 12 sp5 | 3.6.12-4.22.2 | Not reported | SUSE-SU-2020:3563-1 | Not reported |
| Suse | python36-core | rpm | linux enterprise server for sap applications 12 sp5 | 3.6.12-4.22.2 | Not reported | SUSE-SU-2020:3563-1 | Not reported |
| Suse | python3 | rpm | linux enterprise module for basesystem 15 | 3.6.9-3.39.1 | Not reported | SUSE-SU-2019:2802-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for basesystem 15 | 3.6.9-3.39.1 | Not reported | SUSE-SU-2019:2802-1 | Not reported |
| Suse | python3 | rpm | linux enterprise module for basesystem 15 sp1 | 3.6.9-3.39.1 | Not reported | SUSE-SU-2019:2802-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for basesystem 15 sp1 | 3.6.9-3.39.1 | Not reported | SUSE-SU-2019:2802-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for development tools 15 | 3.6.9-3.39.1 | Not reported | SUSE-SU-2019:2802-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for development tools 15 sp1 | 3.6.9-3.39.1 | Not reported | SUSE-SU-2019:2802-1 | Not reported |
| Suse | python | rpm | linux enterprise point of sale 11 sp3 | 2.6.9-40.32.2 | Not reported | SUSE-SU-2021:14198-1 | Not reported |
| Suse | python-base | rpm | linux enterprise point of sale 11 sp3 | 2.6.9-40.32.1 | Not reported | SUSE-SU-2021:14198-1 | Not reported |
| Suse | python-doc | rpm | linux enterprise point of sale 11 sp3 | 2.6-8.40.32.1 | Not reported | SUSE-SU-2021:14198-1 | Not reported |
| Suse | python | rpm | linux enterprise server 11 sp4-ltss | 2.6.9-40.32.2 | Not reported | SUSE-SU-2021:14198-1 | Not reported |
| Suse | python-base | rpm | linux enterprise server 11 sp4-ltss | 2.6.9-40.32.1 | Not reported | SUSE-SU-2021:14198-1 | Not reported |
| Suse | python-doc | rpm | linux enterprise server 11 sp4-ltss | 2.6-8.40.32.1 | Not reported | SUSE-SU-2021:14198-1 | Not reported |
| Suse | python3 | rpm | linux enterprise module for basesystem 15 sp1 | 3.6.10-3.53.1 | Not reported | SUSE-RU-2020:1342-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for basesystem 15 sp1 | 3.6.10-3.53.1 | Not reported | SUSE-RU-2020:1342-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for development tools 15 sp1 | 3.6.10-3.53.1 | Not reported | SUSE-RU-2020:1342-1 | Not reported |
| Opensuse | python | rpm | leap 15.0 | 2.7.14-lp150.6.21.1 | Not reported | OPENSUSE-SU-2019:2389-1 | Not reported |
| Opensuse | python3 | rpm | leap 15.0 | 3.6.9-lp150.2.14.1 | Not reported | OPENSUSE-SU-2019:2453-1 | Not reported |
| Opensuse | python3-base | rpm | leap 15.0 | 3.6.9-lp150.2.14.1 | Not reported | OPENSUSE-SU-2019:2453-1 | Not reported |
| Opensuse | python | rpm | leap 15.1 | 2.7.14-lp151.10.10.1 | Not reported | OPENSUSE-SU-2019:2393-1 | Not reported |
| Opensuse | python-base | rpm | leap 15.1 | 2.7.14-lp151.10.10.2 | Not reported | OPENSUSE-SU-2019:2393-1 | Not reported |
| Opensuse | python-doc | rpm | leap 15.1 | 2.7.14-lp151.10.10.1 | Not reported | OPENSUSE-SU-2019:2393-1 | Not reported |
| Suse | python | rpm | linux enterprise module for basesystem 15 | 2.7.14-7.24.1 | Not reported | SUSE-SU-2019:2743-1 | Not reported |
| Suse | python-base | rpm | linux enterprise module for basesystem 15 | 2.7.14-7.24.1 | Not reported | SUSE-SU-2019:2743-1 | Not reported |
| Suse | python | rpm | linux enterprise module for basesystem 15 sp1 | 2.7.14-7.24.1 | Not reported | SUSE-SU-2019:2743-1 | Not reported |
| Suse | python-base | rpm | linux enterprise module for basesystem 15 sp1 | 2.7.14-7.24.1 | Not reported | SUSE-SU-2019:2743-1 | Not reported |
| Suse | python | rpm | linux enterprise module for desktop applications 15 | 2.7.14-7.24.1 | Not reported | SUSE-SU-2019:2743-1 | Not reported |
| Suse | python | rpm | linux enterprise module for desktop applications 15 sp1 | 2.7.14-7.24.1 | Not reported | SUSE-SU-2019:2743-1 | Not reported |
| Suse | python | rpm | linux enterprise module for python 2 15 sp1 | 2.7.14-7.24.1 | Not reported | SUSE-SU-2019:2743-1 | Not reported |
| Suse | python-base | rpm | linux enterprise module for python 2 15 sp1 | 2.7.14-7.24.1 | Not reported | SUSE-SU-2019:2743-1 | Not reported |
| Suse | python | rpm | linux enterprise desktop 12 sp4 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
| Suse | python-base | rpm | linux enterprise desktop 12 sp4 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
| Suse | python-base | rpm | linux enterprise software development kit 12 sp4 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
| Suse | python | rpm | linux enterprise server 12 sp4 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
| Suse | python-base | rpm | linux enterprise server 12 sp4 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
| Suse | python-doc | rpm | linux enterprise server 12 sp4 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
| Suse | python | rpm | linux enterprise server for sap applications 12 sp4 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
| Suse | python-base | rpm | linux enterprise server for sap applications 12 sp4 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
| Suse | python-doc | rpm | linux enterprise server for sap applications 12 sp4 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
| Suse | python-base | rpm | linux enterprise workstation extension 12 sp4 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
| Suse | python | rpm | enterprise storage 5 | 2.7.13-28.36.1 | Not reported | SUSE-SU-2019:2748-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://cert-portal.siemens.com/productcert/csaf/ssa-398330.json]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2020_1131.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2019-16056]
- [https://osv.dev/vulnerability/ALPINE-CVE-2019-16056]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2019-16056]
- [https://osv.dev/vulnerability/DLA-1924-1]
- [https://osv.dev/vulnerability/DLA-1925-1]
- [https://osv.dev/vulnerability/SUSE-RU-2020:1342-1]
- [https://osv.dev/vulnerability/SUSE-SU-2019:2743-1]
- [https://osv.dev/vulnerability/SUSE-SU-2019:2748-1]
- [https://osv.dev/vulnerability/SUSE-SU-2019:2748-2]
- [https://osv.dev/vulnerability/SUSE-SU-2019:2802-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:3563-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:14198-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2019-16056]
- [https://osv.dev/vulnerability/USN-4151-1]
- [https://osv.dev/vulnerability/USN-4151-2]
- [https://osv.dev/vulnerability/openSUSE-SU-2019:2389-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2019:2393-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2019:2438-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2019:2453-1]
- [https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-16056.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2020/wid-sec-w-2026-4026.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]