diff --git a/CHANGES b/CHANGES
index 334b38ac8f..e61514d903 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+4485.	[bug]		Look in $prefix/lib/pythonX.Y/site-packages for
+			the python modules we install. [RT #43330]
+
 4484.	[bug]		Failure to find readline when requested should be
 			fatal to configure. [RT #43328]
 
diff --git a/bin/python/dnssec-checkds.py.in b/bin/python/dnssec-checkds.py.in
index 52db3eb8ff..32e20026f6 100644
--- a/bin/python/dnssec-checkds.py.in
+++ b/bin/python/dnssec-checkds.py.in
@@ -12,7 +12,8 @@ import sys
 
 sys.path.insert(0, os.path.dirname(sys.argv[0]))
 if os.name != 'nt':
-    sys.path.insert(1, os.path.join('@prefix@', 'lib'))
+    sys.path.insert(1, os.path.join('@prefix@', 'lib',
+		    'python' + sys.version[:3], 'site-packages'))
 
 import isc.checkds
 
diff --git a/bin/python/dnssec-coverage.py.in b/bin/python/dnssec-coverage.py.in
index 276cdeca3e..6b7dfa422d 100644
--- a/bin/python/dnssec-coverage.py.in
+++ b/bin/python/dnssec-coverage.py.in
@@ -12,7 +12,8 @@ import sys
 
 sys.path.insert(0, os.path.dirname(sys.argv[0]))
 if os.name != 'nt':
-    sys.path.insert(1, os.path.join('@prefix@', 'lib'))
+    sys.path.insert(1, os.path.join('@prefix@', 'lib',
+		    'python' + sys.version[:3], 'site-packages'))
 
 import isc.coverage
 
diff --git a/bin/python/dnssec-keymgr.py.in b/bin/python/dnssec-keymgr.py.in
index 9f140879a8..1caa6922b4 100644
--- a/bin/python/dnssec-keymgr.py.in
+++ b/bin/python/dnssec-keymgr.py.in
@@ -12,7 +12,8 @@ import sys
 
 sys.path.insert(0, os.path.dirname(sys.argv[0]))
 if os.name != 'nt':
-    sys.path.insert(1, os.path.join('@prefix@', 'lib'))
+    sys.path.insert(1, os.path.join('@prefix@', 'lib',
+		    'python' + sys.version[:3], 'site-packages'))
 
 import isc.keymgr