python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python3Upgrade python2Upgrade python2-tkinter | Aug 24, 2018 | Jun 19, 2018 |
| Amazon Linux Ami 2 | — | Upgrade python-libsUpgrade python-develUpgrade python-testUpgrade python-toolsUpgrade python-debuginfoUpgrade pythonUpgrade python-debugUpgrade tkinter | Apr 27, 2020 | Jun 19, 2018 |
| Amazon_linux | — | Upgrade python27Upgrade python36Upgrade python35Upgrade python27Upgrade python34 | Apr 27, 2018 | Apr 26, 2018 |
| Centos_linux | — | Upgrade tkinterUpgrade python-develUpgrade python-libsUpgrade python-debuginfoUpgrade python-debugUpgrade python-toolsUpgrade python-testUpgrade python | Aug 28, 2019 | Jun 19, 2018 |
| Debian | — | Upgrade python2.7 | Sep 28, 2018 | Apr 26, 2018 |
| Freebsd | — | Upgrade python27 | May 6, 2018 | May 5, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-develUpgrade python-libsUpgrade tkinterUpgrade python | Feb 22, 2019 | Jun 19, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pythonUpgrade tkinterUpgrade python-libsUpgrade python-devel | May 7, 2019 | Jun 19, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-develUpgrade python-libsUpgrade tkinterUpgrade python | Mar 11, 2019 | Jun 19, 2018 |
| Oracle Solaris | — | Upgrade library/python/tkinter-35 to version 3.5.6-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-34 to version 3.4.9-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-34 to version 3.4.9-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-35 to version 3.5.6-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4 | Feb 20, 2019 | Jun 19, 2018 |
| Oracle_linux | — | Upgrade tkinterUpgrade python-toolsUpgrade python-libsUpgrade python-develUpgrade python-testUpgrade python-debugUpgrade python | Nov 6, 2018 | Mar 14, 2018 |
| Redhat_linux | — | Upgrade python-debuginfoUpgrade pythonUpgrade python-toolsUpgrade python-libsUpgrade tkinterNo solution existsUpgrade python-develUpgrade python-testUpgrade python-debug | Oct 31, 2018 | Jun 19, 2018 |
| Suse | — | Upgrade python-doc-pdfUpgrade libpython2_7-1_0Upgrade python-x86Upgrade python-32bitUpgrade libpython2_6-1_0Upgrade pythonUpgrade python-gdbmUpgrade python-tkUpgrade libpython2_6-1_0-x86Upgrade python3Upgrade python3-testsuiteUpgrade python-idleUpgrade libpython3_4m1_0-32bitUpgrade python-baseUpgrade libpython2_6-1_0-32bitUpgrade python-demoUpgrade python3-cursesUpgrade python3-tkUpgrade python3-base-32bitUpgrade python3-toolsUpgrade python-base-32bitUpgrade python-xmlUpgrade python3-dbmUpgrade python-docUpgrade python3-32bitUpgrade python3-develUpgrade python-develUpgrade python3-baseUpgrade libpython3_6m1_0Upgrade libpython2_7-1_0-32bitUpgrade python3-idleUpgrade python-base-x86Upgrade python-cursesUpgrade libpython3_6m1_0-32bitUpgrade libpython3_4m1_0 | Aug 18, 2018 | Apr 26, 2018 |
| Ubuntu | — | Upgrade python3.9-minimal (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.5Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.9 (Ubuntu Pro)Upgrade python3.12-minimalUpgrade python3.5 (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.8-minimalUpgrade python2.7Upgrade python3.10-minimalUpgrade python3.8Upgrade python3.10Upgrade python3.7 (Ubuntu Pro)Upgrade python3.11 (Ubuntu Pro)Upgrade python2.7-minimalUpgrade python3.11-minimal (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade python3.4Upgrade python3.11Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.4-minimalUpgrade python3.11-minimalUpgrade python3.5-minimalUpgrade python3.12 | Nov 15, 2018 | Apr 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub