Skip to content
OpenAdvisories
Low ALAS2023-2025-917 1 CVE

Low: python3.9 security update (Amazon Linux 2023)

Published Mar 26, 2025 · Updated Apr 1, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-1795: During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.

Fixed packages 10

ReleasePackageFixed in
Amazon Linux · 2023 python-unversioned-command 0:3.9.21-1.amzn2023.0.3
Amazon Linux · 2023 python3 0:3.9.21-1.amzn2023.0.3
Amazon Linux · 2023 python3-debug 0:3.9.21-1.amzn2023.0.3
Amazon Linux · 2023 python3-devel 0:3.9.21-1.amzn2023.0.3
Amazon Linux · 2023 python3-idle 0:3.9.21-1.amzn2023.0.3
Amazon Linux · 2023 python3-libs 0:3.9.21-1.amzn2023.0.3
Amazon Linux · 2023 python3-test 0:3.9.21-1.amzn2023.0.3
Amazon Linux · 2023 python3-tkinter 0:3.9.21-1.amzn2023.0.3
Amazon Linux · 2023 python3.9-debuginfo 0:3.9.21-1.amzn2023.0.3
Amazon Linux · 2023 python3.9-debugsource 0:3.9.21-1.amzn2023.0.3

Vulnerabilities 1

  • Low 2.3
    CVE-2025-1795

    Mishandling of comma during folding and unicode-encoding of email headers

    During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in t…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-1795.html