CVE-2025-1795
Fixed in a distro release EPSS <1%CVSS 2.3
During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.
Products: Python Software Foundation CPython
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | python3 | 3.7.16-1.amzn2.0.15 |
| Amazon Linux 2 | python3-debug | 3.7.16-1.amzn2.0.15 |
| Amazon Linux 2 | python3-devel | 3.7.16-1.amzn2.0.15 |
| Amazon Linux 2 | python3-libs | 3.7.16-1.amzn2.0.15 |
| Amazon Linux 2 | python3-test | 3.7.16-1.amzn2.0.15 |
| Amazon Linux 2 | python3-tkinter | 3.7.16-1.amzn2.0.15 |
| Amazon Linux 2 | python3-tools | 3.7.16-1.amzn2.0.15 |
| Amazon Linux 2023 | python-unversioned-command | 3.9.21-1.amzn2023.0.3 |
| Amazon Linux 2023 | python3 | 3.9.21-1.amzn2023.0.3 |
| Amazon Linux 2023 | python3-debug | 3.9.21-1.amzn2023.0.3 |
| Amazon Linux 2023 | python3-devel | 3.9.21-1.amzn2023.0.3 |
| Amazon Linux 2023 | python3-idle | 3.9.21-1.amzn2023.0.3 |
| Amazon Linux 2023 | python3-libs | 3.9.21-1.amzn2023.0.3 |
| Amazon Linux 2023 | python3-test | 3.9.21-1.amzn2023.0.3 |
| Amazon Linux 2023 | python3-tkinter | 3.9.21-1.amzn2023.0.3 |
| Amazon Linux 2023 | python3.11 | 3.11.11-5.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-debug | 3.11.11-5.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-devel | 3.11.11-5.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-idle | 3.11.11-5.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-libs | 3.11.11-5.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-test | 3.11.11-5.amzn2023.0.1 |
| Amazon Linux 2023 | python3.11-tkinter | 3.11.11-5.amzn2023.0.1 |
| Chainguard | python-3.10 | 3.10.17-r0 |
| Chainguard | python-3.9 | 3.9.25-r0 |
| Debian 11 | pypy3 | 7.3.5+dfsg-2+deb11u5 |
| Debian 11 | python3.9 | 3.9.2-1+deb11u3 |
| Debian 12 | pypy3 | no fix |
| Debian 12 | python3.11 | 3.11.2-6+deb12u6 |
| Debian 13 | pypy3 | 7.3.18+dfsg-1 |
| Debian 13 | python3.13 | 3.13.0~b1-1 |
| Debian 14 | pypy3 | 7.3.18+dfsg-1 |
| Debian 14 | python3.13 | 3.13.0~b1-1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | python311-core | 3.11.11-150600.3.21.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | python311 | 3.11.11-150400.9.49.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | python311-core | 3.11.11-150400.9.49.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP6 | python311 | 3.11.11-150600.3.21.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP6 | python311-core | 3.11.11-150600.3.21.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP6 | python312 | 3.12.9-150600.3.21.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP6 | python312-core | 3.12.9-150600.3.21.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP7 | python313 | 3.13.5-150700.4.11.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP7 | python313-core | 3.13.5-150700.4.11.1 |
| SUSE Linux Micro 6.0 | python311 | 3.11.11-1.1 |
| SUSE Linux Micro 6.0 | python311-core | 3.11.11-1.1 |
| SUSE Linux Micro 6.1 | python311 | 3.11.12-slfo.1.1_1.1 |
| SUSE Linux Micro 6.1 | python311-core | 3.11.12-slfo.1.1_1.1 |
| Ubuntu 22.04 LTS | python3.10 | 3.10.12-1~22.04.10 |
| Ubuntu 24.04 LTS | python3.12 | 3.12.3-1ubuntu0.6 |
| Ubuntu Pro 14.04 LTS | python3.4 | no fix |
| Ubuntu Pro 14.04 LTS | python3.5 | no fix |
| Ubuntu Pro 16.04 LTS | python3.5 | no fix |
| Ubuntu Pro 18.04 LTS | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm5 |
| Ubuntu Pro 18.04 LTS | python3.7 | 3.7.5-2ubuntu1~18.04.2+esm6 |
| Ubuntu Pro 18.04 LTS | python3.8 | 3.8.0-3ubuntu1~18.04.2+esm5 |
| Ubuntu Pro 20.04 LTS | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm1 |
| Ubuntu Pro 20.04 LTS | python3.9 | 3.9.5-3ubuntu0~20.04.1+esm5 |
| Ubuntu Pro 22.04 LTS | python3.11 | 3.11.0~rc1-1~22.04.1~esm4 |
| Wolfi | python-3.10 | 3.10.17-r0 |
| openSUSE Leap 15.6 | python311 | 3.11.11-150600.3.21.1 |
| openSUSE Leap 15.6 | python311-core | 3.11.11-150600.3.21.1 |
| openSUSE Leap 15.6 | python311-documentation | 3.11.11-150600.3.21.1 |
| openSUSE Leap 15.6 | python312 | 3.12.9-150600.3.21.1 |
| openSUSE Leap 15.6 | python312-core | 3.12.9-150600.3.21.1 |
| openSUSE Leap 15.6 | python312-documentation | 3.12.9-150600.3.21.1 |
| openSUSE Tumbleweed | python311 | 3.11.11-4.1 |
| openSUSE Tumbleweed | python312 | 3.12.9-2.1 |
| openSUSE Tumbleweed | python313 | 3.13.2-3.1 |