{"id":"CVE-2016-0772","aliases":["AZL-109605","DEBIAN-CVE-2016-0772","DLA-1663-1","DLA-522-1","DLA-871-1","EUVD-2016-0788","GHSA-6m57-q338-h677","MGASA-2016-0230","PSF-2016-3","RHSA-2016:1626","RHSA-2016:1627","RHSA-2016:1628","RHSA-2016:1629","RHSA-2016:1630","SUSE-SU-2016:2106-1","SUSE-SU-2016:2270-1","SUSE-SU-2016:2653-1","SUSE-SU-2016:2859-1","SUSE-SU-2019:0223-1","SUSE-SU-2020:0114-1","SUSE-SU-2020:0234-1","UBUNTU-CVE-2016-0772","USN-3134-1","openSUSE-SU-2020:0086-1","openSUSE-SU-2024:10193-1","openSUSE-SU-2024:10450-1","openSUSE-SU-2024:10536-1","openSUSE-SU-2024:11284-1"],"status":"published","title":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5...","description":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.15352,"percentile":0.96798,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-693"],"published":"2016-06-21T00:00:00Z","modified":"2026-10-27T05:36:16Z","exploits":[{"source":"exploitdb","id":"EDB-43500","title":"Python smtplib 2.7.11 / 3.4.4 / 3.5.1 - Man In The Middle StartTLS Stripping","type":"local","platform":"multiple","date":"2016-07-03","url":"https://www.exploit-db.com/exploits/43500"}],"fixes":[{"ecosystem":"Debian:11","package":"python2.7","fixed_in":["2.7.12~rc1-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"python3.2","fixed_in":["3.2.3-7+deb7u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","fixed_in":["2.7.6-8ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"python3.4","fixed_in":["3.4.3-1ubuntu1~14.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"python3.5","fixed_in":["3.5.2-2ubuntu0~16.04.4~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"python2.7","fixed_in":["2.7.12-1ubuntu0~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"python3.5","fixed_in":["3.5.2-2ubuntu0~16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.11.0-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12~rc1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1+deb8u2"}]}],"versions":["3.4.2-1","3.4.2-1+deb8u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:7","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.3-6+deb7u3"}]}],"versions":["2.7.3-6","2.7.3-6+deb7u1","2.7.3-6+deb7u2"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"python3.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-7+deb7u1"}]}],"versions":["3.2.3-7"]},{"source":"osv","ecosystem":"Mageia:5","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-2.3.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1.4.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-66.el6_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-38.el7_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python35-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python35-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python35-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python35-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python35-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python35-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python35-python-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python35-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-9.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python33-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python33-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python33-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python33-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python33-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python33-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python33-python-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python33-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-18.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python33-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python33-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python33-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python33-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python33-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python33-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python33-python-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python33-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-16.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-python34-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-python34-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-python34-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-python34-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-python34-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-python34-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-python34-python-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-python34-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python34-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python34-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python34-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python34-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python34-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python34-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python34-python-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-python34-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.2-13.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-24.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-24.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-24.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-24.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-24.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-24.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-24.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-24.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-24.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-24.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.9-39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.9-39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-8.39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.9-39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.9-39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-8.39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.9-39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.9-39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-8.39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-17.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-17.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-17.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-17.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-17.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-17.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-17.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-17.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-17.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-16.7.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-16.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-16.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.10-3.42.2"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.10-3.42.2"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.10-3.42.2"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.10-3.42.2"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.10-3.42.2"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.10-3.42.2"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.3"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8","2.7.6-8ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1~14.04.5"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1","3.4.0-2ubuntu1.1","3.4.3-1ubuntu1~14.04.1","3.4.3-1ubuntu1~14.04.3","3.4.3-1ubuntu1~14.04.4"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2ubuntu0~16.04.4~14.04.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.1"}]}],"versions":["2.7.10-4ubuntu1","2.7.10-4ubuntu2","2.7.11-2","2.7.11-3","2.7.11-4","2.7.11-6","2.7.11-7","2.7.11-7ubuntu1","2.7.12-1~16.04"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2ubuntu0~16.04.1"}]}],"versions":["3.5.0-3","3.5.0-3ubuntu1","3.5.1~rc1-2ubuntu1","3.5.1-1","3.5.1-2","3.5.1-3","3.5.1-5","3.5.1-6ubuntu1","3.5.1-6ubuntu2","3.5.1-9ubuntu1","3.5.1-10","3.5.2-2~16.01","3.5.2-2~16.04"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.3"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8","2.7.6-8ubuntu0.2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1ubuntu1~14.04.5"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1","3.4.0-2ubuntu1.1","3.4.3-1ubuntu1~14.04.1","3.4.3-1ubuntu1~14.04.3","3.4.3-1ubuntu1~14.04.4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1ubuntu0~16.04.1"}]}],"versions":["2.7.10-4ubuntu1","2.7.10-4ubuntu2","2.7.11-2","2.7.11-3","2.7.11-4","2.7.11-6","2.7.11-7","2.7.11-7ubuntu1","2.7.12-1~16.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"python3.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2ubuntu0~16.04.1"}]}],"versions":["3.5.0-3","3.5.0-3ubuntu1","3.5.1~rc1-2ubuntu1","3.5.1-1","3.5.1-2","3.5.1-3","3.5.1-5","3.5.1-6ubuntu1","3.5.1-6ubuntu2","3.5.1-9ubuntu1","3.5.1-10","3.5.2-2~16.01","3.5.2-2~16.04"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.10-lp151.6.7.1"}]}],"bundled":26},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"python3-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.10-lp151.6.7.1"}]}],"bundled":26},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1.3"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1.5"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1.4"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python36","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.15-1.1"}]}],"bundled":39}],"products":[{"vendor":"python","product":"python"}],"references":[{"url":"https://hg.python.org/cpython/rev/d590114c2394","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1630.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1627.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://hg.python.org/cpython/rev/b3ce713fb9be","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1629.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPSV","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303647","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-5","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/14/9","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","report"]},{"url":"https://hg.python.org/cpython/raw-file/v2.7.12/Misc/NEWS","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","advisory"]},{"url":"https://security.gentoo.org/glsa/201701-18","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-2","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","advisory"]},{"url":"http://www.securityfocus.com/bid/91225","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1628.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1626.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0772","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-6m57-q338-h677"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-0772","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0230.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18691","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/06/16/1","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/06/16/2","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/06/14/9","tags":["web"]},{"url":"https://bugs.python.org/issue26171","tags":["report"]},{"url":"https://bugs.python.org/issue5124","tags":["report"]},{"url":"https://bugs.python.org/issue22928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-0772","tags":["advisory"]},{"url":"http://seclists.org/oss-sec/2016/q2/541","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1626","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365200","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1626.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0772","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0772","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5699","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5699","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000110","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000110","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000110","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1627","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1627.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1628","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1628.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1629","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1629.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1630","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1630.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162106-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/984751","tags":["report"]},{"url":"https://bugzilla.suse.com/985177","tags":["report"]},{"url":"https://bugzilla.suse.com/985348","tags":["report"]},{"url":"https://bugzilla.suse.com/989523","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5699","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162270-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162653-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/951166","tags":["report"]},{"url":"https://bugzilla.suse.com/983582","tags":["report"]},{"url":"https://bugzilla.suse.com/991069","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162859-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190223-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1122191","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5010","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200114-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027282","tags":["report"]},{"url":"https://bugzilla.suse.com/1029377","tags":["report"]},{"url":"https://bugzilla.suse.com/1029902","tags":["report"]},{"url":"https://bugzilla.suse.com/1040164","tags":["report"]},{"url":"https://bugzilla.suse.com/1042670","tags":["report"]},{"url":"https://bugzilla.suse.com/1070853","tags":["report"]},{"url":"https://bugzilla.suse.com/1079761","tags":["report"]},{"url":"https://bugzilla.suse.com/1081750","tags":["report"]},{"url":"https://bugzilla.suse.com/1083507","tags":["report"]},{"url":"https://bugzilla.suse.com/1086001","tags":["report"]},{"url":"https://bugzilla.suse.com/1088004","tags":["report"]},{"url":"https://bugzilla.suse.com/1088009","tags":["report"]},{"url":"https://bugzilla.suse.com/1088573","tags":["report"]},{"url":"https://bugzilla.suse.com/1094814","tags":["report"]},{"url":"https://bugzilla.suse.com/1107030","tags":["report"]},{"url":"https://bugzilla.suse.com/1109663","tags":["report"]},{"url":"https://bugzilla.suse.com/1109847","tags":["report"]},{"url":"https://bugzilla.suse.com/1120644","tags":["report"]},{"url":"https://bugzilla.suse.com/1129346","tags":["report"]},{"url":"https://bugzilla.suse.com/1130840","tags":["report"]},{"url":"https://bugzilla.suse.com/1133452","tags":["report"]},{"url":"https://bugzilla.suse.com/1137942","tags":["report"]},{"url":"https://bugzilla.suse.com/1138459","tags":["report"]},{"url":"https://bugzilla.suse.com/1141853","tags":["report"]},{"url":"https://bugzilla.suse.com/1149121","tags":["report"]},{"url":"https://bugzilla.suse.com/1149792","tags":["report"]},{"url":"https://bugzilla.suse.com/1149955","tags":["report"]},{"url":"https://bugzilla.suse.com/1151490","tags":["report"]},{"url":"https://bugzilla.suse.com/1153238","tags":["report"]},{"url":"https://bugzilla.suse.com/1159035","tags":["report"]},{"url":"https://bugzilla.suse.com/1159622","tags":["report"]},{"url":"https://bugzilla.suse.com/637176","tags":["report"]},{"url":"https://bugzilla.suse.com/658604","tags":["report"]},{"url":"https://bugzilla.suse.com/673071","tags":["report"]},{"url":"https://bugzilla.suse.com/709442","tags":["report"]},{"url":"https://bugzilla.suse.com/743787","tags":["report"]},{"url":"https://bugzilla.suse.com/747125","tags":["report"]},{"url":"https://bugzilla.suse.com/751718","tags":["report"]},{"url":"https://bugzilla.suse.com/754447","tags":["report"]},{"url":"https://bugzilla.suse.com/754677","tags":["report"]},{"url":"https://bugzilla.suse.com/787526","tags":["report"]},{"url":"https://bugzilla.suse.com/809831","tags":["report"]},{"url":"https://bugzilla.suse.com/831629","tags":["report"]},{"url":"https://bugzilla.suse.com/834601","tags":["report"]},{"url":"https://bugzilla.suse.com/871152","tags":["report"]},{"url":"https://bugzilla.suse.com/885662","tags":["report"]},{"url":"https://bugzilla.suse.com/885882","tags":["report"]},{"url":"https://bugzilla.suse.com/917607","tags":["report"]},{"url":"https://bugzilla.suse.com/942751","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9947","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200234-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1041090","tags":["report"]},{"url":"https://bugzilla.suse.com/1068664","tags":["report"]},{"url":"https://bugzilla.suse.com/1073269","tags":["report"]},{"url":"https://bugzilla.suse.com/1073748","tags":["report"]},{"url":"https://bugzilla.suse.com/1078326","tags":["report"]},{"url":"https://bugzilla.suse.com/1078485","tags":["report"]},{"url":"https://bugzilla.suse.com/1079300","tags":["report"]},{"url":"https://bugzilla.suse.com/1084650","tags":["report"]},{"url":"https://bugzilla.suse.com/1111793","tags":["report"]},{"url":"https://bugzilla.suse.com/1113755","tags":["report"]},{"url":"https://bugzilla.suse.com/1130847","tags":["report"]},{"url":"https://bugzilla.suse.com/1153830","tags":["report"]},{"url":"https://bugzilla.suse.com/214983","tags":["report"]},{"url":"https://bugzilla.suse.com/298378","tags":["report"]},{"url":"https://bugzilla.suse.com/346490","tags":["report"]},{"url":"https://bugzilla.suse.com/367853","tags":["report"]},{"url":"https://bugzilla.suse.com/379534","tags":["report"]},{"url":"https://bugzilla.suse.com/380942","tags":["report"]},{"url":"https://bugzilla.suse.com/399190","tags":["report"]},{"url":"https://bugzilla.suse.com/406051","tags":["report"]},{"url":"https://bugzilla.suse.com/425138","tags":["report"]},{"url":"https://bugzilla.suse.com/426563","tags":["report"]},{"url":"https://bugzilla.suse.com/430761","tags":["report"]},{"url":"https://bugzilla.suse.com/432677","tags":["report"]},{"url":"https://bugzilla.suse.com/436966","tags":["report"]},{"url":"https://bugzilla.suse.com/437293","tags":["report"]},{"url":"https://bugzilla.suse.com/441088","tags":["report"]},{"url":"https://bugzilla.suse.com/462375","tags":["report"]},{"url":"https://bugzilla.suse.com/525295","tags":["report"]},{"url":"https://bugzilla.suse.com/534721","tags":["report"]},{"url":"https://bugzilla.suse.com/551715","tags":["report"]},{"url":"https://bugzilla.suse.com/572673","tags":["report"]},{"url":"https://bugzilla.suse.com/577032","tags":["report"]},{"url":"https://bugzilla.suse.com/581765","tags":["report"]},{"url":"https://bugzilla.suse.com/603255","tags":["report"]},{"url":"https://bugzilla.suse.com/617751","tags":["report"]},{"url":"https://bugzilla.suse.com/638233","tags":["report"]},{"url":"https://bugzilla.suse.com/682554","tags":["report"]},{"url":"https://bugzilla.suse.com/697251","tags":["report"]},{"url":"https://bugzilla.suse.com/707667","tags":["report"]},{"url":"https://bugzilla.suse.com/718009","tags":["report"]},{"url":"https://bugzilla.suse.com/747794","tags":["report"]},{"url":"https://bugzilla.suse.com/766778","tags":["report"]},{"url":"https://bugzilla.suse.com/794139","tags":["report"]},{"url":"https://bugzilla.suse.com/804978","tags":["report"]},{"url":"https://bugzilla.suse.com/827982","tags":["report"]},{"url":"https://bugzilla.suse.com/831442","tags":["report"]},{"url":"https://bugzilla.suse.com/836739","tags":["report"]},{"url":"https://bugzilla.suse.com/856835","tags":["report"]},{"url":"https://bugzilla.suse.com/856836","tags":["report"]},{"url":"https://bugzilla.suse.com/857470","tags":["report"]},{"url":"https://bugzilla.suse.com/863741","tags":["report"]},{"url":"https://bugzilla.suse.com/898572","tags":["report"]},{"url":"https://bugzilla.suse.com/901715","tags":["report"]},{"url":"https://bugzilla.suse.com/935856","tags":["report"]},{"url":"https://bugzilla.suse.com/945401","tags":["report"]},{"url":"https://bugzilla.suse.com/964182","tags":["report"]},{"url":"https://bugzilla.suse.com/997436","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9948","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-0772","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3134-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-5636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1000110","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SRKGGFVSV7DDWCMAOSO6E3F66U2CF5XR/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3737","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-0772","description":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"","status":"published","published":"2016-09-02T14:00:00Z","modified":"2024-08-05T22:30:04.119Z","updated_at":"2026-11-02T14:33:37.12286Z"}],"euvd":[{"id":"EUVD-2016-0788","description":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"","status":"published","published":"2016-09-02T14:00:00Z","modified":"2024-08-05T22:30:04Z","updated_at":"2026-11-03T02:23:00.426765Z"}],"ghsa":[{"id":"GHSA-6m57-q338-h677","title":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5...","description":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"","status":"published","published":"2022-05-14T01:35:22Z","modified":"2023-02-02T05:04:19Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:51:50.619018Z"}],"nvd":[{"id":"CVE-2016-0772","description":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"","status":"published","published":"2016-09-02T14:59:00.127Z","modified":"2026-06-17T00:38:11.783Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:03:29.893676Z"}],"osv":[{"id":"AZL-109605","title":"CVE-2016-0772 affecting package python-py 1.11.0-1","description":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"","status":"published","published":"2016-09-02T14:59:00Z","modified":"2026-10-27T05:36:16Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:02.044071Z"},{"id":"CVE-2016-0772","description":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"","status":"published","published":"2016-09-02T14:59:00.127Z","modified":"2026-10-24T10:30:52.051730304Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-0772","description":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"","status":"published","published":"2016-09-02T14:59:00.127Z","modified":"2026-08-04T06:03:08.781578789Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"RHSA-2016:1626","title":"Red Hat Security Advisory: python security update","status":"published","published":"2024-09-13T12:28:05Z","modified":"2026-06-29T10:13:23Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1627","title":"Red Hat Security Advisory: rh-python35-python security update","status":"published","published":"2024-09-13T12:28:11Z","modified":"2026-06-29T10:13:24Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1628","title":"Red Hat Security Advisory: python27-python security update","status":"published","published":"2024-09-13T12:28:19Z","modified":"2026-06-29T10:13:24Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1629","title":"Red Hat Security Advisory: python33-python security update","status":"published","published":"2024-09-13T12:28:24Z","modified":"2026-06-29T10:13:25Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1630","title":"Red Hat Security Advisory: rh-python34-python security update","status":"published","published":"2024-09-13T12:28:31Z","modified":"2026-06-29T10:13:26Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2016-0772","description":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"","status":"published","published":"2016-09-02T00:00:00Z","modified":"2026-04-22T10:27:26.227398Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"DLA-1663-1","title":"python3.4 - security update","status":"published","published":"2019-02-07T00:00:00Z","modified":"2026-03-09T01:19:16.895585Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-522-1","title":"python2.7 - security update","status":"published","published":"2016-06-21T00:00:00Z","modified":"2026-03-09T02:11:36.155669Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DLA-871-1","title":"python3.2 - security update","status":"published","published":"2017-03-24T00:00:00Z","modified":"2026-03-09T02:08:45.758029Z","updated_at":"2026-11-02T15:46:13.584509Z"},{"id":"MGASA-2016-0230","title":"Updated python packages fix security vulnerabilities","description":"Updated python and python3 packages fixes security vulnerability:\n\n- Heap overflow in zipimporter module (CVE-2016-5636).\n- HTTP header injection in urrlib2/urllib/httplib/http.client (CVE-2016-5699).\n- smtplib StartTLS stripping attack (CVE-2016-0772).\n","status":"published","published":"2016-06-22T16:36:39Z","modified":"2026-04-16T06:24:09.239758492Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2020:0086-1","title":"Security update for python3","description":"This update for python3 to version 3.6.10 fixes the following issues:\n\n- CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).\n- CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).\n- CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-01-21T15:12:01Z","modified":"2026-02-04T04:15:12.498924Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10193-1","title":"python-doc-2.7.12-1.3 on GA media","description":"These are all security issues fixed in the python-doc-2.7.12-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:56:10.403491Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10450-1","title":"python-2.7.12-1.5 on GA media","description":"These are all security issues fixed in the python-2.7.12-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:02:05.86102Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10536-1","title":"libpython2_7-1_0-2.7.12-1.4 on GA media","description":"These are all security issues fixed in the libpython2_7-1_0-2.7.12-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:14.818245Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11284-1","title":"python36-3.6.15-1.1 on GA media","description":"These are all security issues fixed in the python36-3.6.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:26:32.95982Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"PSF-2016-3","title":"smtplib TLS stripping","description":"The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a \"StartTLS stripping attack.\"","status":"published","published":"2016-09-02T14:00:00Z","modified":"2025-10-09T00:58:41.328801Z","updated_at":"2026-11-02T15:52:50.263679Z"},{"id":"SUSE-SU-2016:2106-1","title":"Security update for python","description":"\nThis update for python fixes the following issues:\n\n- CVE-2016-0772: smtplib vulnerability opens startTLS stripping attack (bsc#984751)\n- CVE-2016-5636: heap overflow when importing malformed zip files (bsc#985177)\n- CVE-2016-5699: incorrect validation of HTTP headers allow header injection (bsc#985348)\n- CVE-2016-1000110: HTTPoxy vulnerability in urllib, fixed by disregarding HTTP_PROXY when REQUEST_METHOD is also set (bsc#989523)\n","status":"published","published":"2016-08-19T08:31:23Z","modified":"2026-02-04T03:58:56.167247Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2270-1","title":"Security update for python","description":"\nThis update for python fixes the following issues:\n\n- CVE-2016-0772: smtplib vulnerability opens startTLS stripping attack (bsc#984751)\n- CVE-2016-5699: incorrect validation of HTTP headers allow header injection (bsc#985348)\n- CVE-2016-1000110: HTTPoxy vulnerability in urllib, fixed by disregarding HTTP_PROXY\n  when REQUEST_METHOD is also set (bsc#989523)\n","status":"published","published":"2016-09-09T06:13:10Z","modified":"2026-02-04T02:25:47.369347Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2653-1","title":"Security update for python3","description":"\nThis update provides Python 3.4.5, which brings many fixes and enhancements.\n\nThe following security issues have been fixed:\n\n- CVE-2016-1000110: CGIHandler could have allowed setting of HTTP_PROXY environment\n  variable based on user supplied Proxy request header. (bsc#989523)\n- CVE-2016-0772: A vulnerability in smtplib could have allowed a MITM attacker to\n  perform a startTLS stripping attack. (bsc#984751)\n- CVE-2016-5636: A heap overflow in Python's zipimport module. (bsc#985177)\n- CVE-2016-5699: A header injection flaw in urrlib2/urllib/httplib/http.client.\n  (bsc#985348)\n\nThe update also includes the following non-security fixes:\n\n- Don't force 3rd party C extensions to be built with -Werror=declaration-after-statement.\n  (bsc#951166)\n- Make urllib proxy var handling behave as usual on POSIX. (bsc#983582)\n\nFor a comprehensive list of changes please refer to the upstream change log:\nhttps://docs.python.org/3.4/whatsnew/changelog.html\n","status":"published","published":"2016-10-26T13:22:10Z","modified":"2026-02-04T02:35:30.576502Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2859-1","title":"Security update for python3","description":"\nThis update provides Python 3.4.5, which brings many fixes and enhancements.\n\nThe following security issues have been fixed:\n\n- CVE-2016-1000110: CGIHandler could have allowed setting of HTTP_PROXY environment\n  variable based on user supplied Proxy request header. (bsc#989523)\n- CVE-2016-0772: A vulnerability in smtplib could have allowed a MITM attacker to\n  perform a startTLS stripping attack. (bsc#984751)\n- CVE-2016-5636: A heap overflow in Python's zipimport module. (bsc#985177)\n- CVE-2016-5699: A header injection flaw in urrlib2/urllib/httplib/http.client.\n  (bsc#985348)\n\nThe update also includes the following non-security fixes:\n\n- Don't force 3rd party C extensions to be built with -Werror=declaration-after-statement.\n  (bsc#951166)\n- Make urllib proxy var handling behave as usual on POSIX. (bsc#983582)\n\nFor a comprehensive list of changes please refer to the upstream change log:\nhttps://docs.python.org/3.4/whatsnew/changelog.html\n","status":"published","published":"2016-11-18T11:42:34Z","modified":"2026-02-04T02:23:10.723154Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2019:0223-1","title":"Security update for python","description":"This update for python fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2016-0772: smtplib vulnerability opens startTLS stripping attack (bsc#984751)\n- CVE-2016-5636: heap overflow when importing malformed zip files (bsc#985177)\n- CVE-2016-5699: incorrect validation of HTTP headers allow header injection (bsc#985348)\n- CVE-2016-1000110: HTTPoxy vulnerability in urllib, fixed by disregarding HTTP_PROXY when REQUEST_METHOD is also set (bsc#989523)\n- CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)\n","status":"published","published":"2019-02-01T14:42:21Z","modified":"2026-02-04T03:52:28.95955Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2020:0114-1","title":"Security update for python3","description":"This update for python3 to version 3.6.10 fixes the following issues:\n\n- CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).\n- CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).\n- CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).\n","status":"published","published":"2020-01-16T09:12:11Z","modified":"2026-02-04T02:55:36.328023Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0234-1","title":"Security update for python","description":"This update for python fixes the following issues:\n\nUpdated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).\n","status":"published","published":"2020-01-24T15:34:18Z","modified":"2025-05-02T04:03:47.841058Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-3134-1","title":"python2.7, python3.2, python3.4, python3.5 vulnerabilities","description":"It was discovered that the smtplib library in Python did not return an\nerror when StartTLS fails. A remote attacker could possibly use this to\nexpose sensitive information. (CVE-2016-0772)\n\nRémi Rampin discovered that Python would not protect CGI applications\nfrom contents of the HTTP_PROXY environment variable when based on\nthe contents of the Proxy header from HTTP requests. A remote attacker\ncould possibly use this to cause a CGI application to redirect outgoing\nHTTP requests. (CVE-2016-1000110)\n\nInsu Yun discovered an integer overflow in the zipimporter module in\nPython that could lead to a heap-based overflow. An attacker could\nuse this to craft a special zip file that when read by Python could\npossibly execute arbitrary code. (CVE-2016-5636)\n\nGuido Vranken discovered that the urllib modules in Python did\nnot properly handle carriage return line feed (CRLF) in headers. A\nremote attacker could use this to craft URLs that inject arbitrary\nHTTP headers. This issue only affected Ubuntu 12.04 LTS and Ubuntu\n14.04 LTS. (CVE-2016-5699)\n","status":"published","published":"2016-11-22T18:51:17Z","modified":"2026-04-22T09:29:24.465516Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}