Skip to content
OpenAdvisories
Low ALAS2-2025-2808 1 CVE

Low: python3 security update (Amazon Linux 2)

Published Mar 26, 2025 · Updated Apr 1, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-1795: During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.

Fixed packages 8

ReleasePackageFixed in
Amazon Linux · 2 python3 0:3.7.16-1.amzn2.0.15
Amazon Linux · 2 python3-debug 0:3.7.16-1.amzn2.0.15
Amazon Linux · 2 python3-debuginfo 0:3.7.16-1.amzn2.0.15
Amazon Linux · 2 python3-devel 0:3.7.16-1.amzn2.0.15
Amazon Linux · 2 python3-libs 0:3.7.16-1.amzn2.0.15
Amazon Linux · 2 python3-test 0:3.7.16-1.amzn2.0.15
Amazon Linux · 2 python3-tkinter 0:3.7.16-1.amzn2.0.15
Amazon Linux · 2 python3-tools 0:3.7.16-1.amzn2.0.15

Vulnerabilities 1

  • Low 2.3
    CVE-2025-1795

    Mishandling of comma during folding and unicode-encoding of email headers

    During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in t…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-1795.html