Cpython: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• Medium 6.0
  CVE-2025-15282

  Header injection via newlines in data URL mediatype

  User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype.

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Wolfi
  Jan 20, 2026
• Medium 6.0
  CVE-2026-0672

  Header injection in http.cookies.Morsel

  When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi
  Jan 20, 2026
• Medium 6.0
  CVE-2026-1299

  email BytesGenerator header injection due to unquoted newlines

  The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing h…

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi
  Jan 23, 2026
• Medium 5.9
  CVE-2025-15366

  IMAP command injection in user-controlled commands

  The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 20, 2026
• Medium 5.9
  CVE-2025-15367

  POP3 command injection in user-controlled commands

  The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi
  Jan 20, 2026
• Medium 5.9
  CVE-2026-0865

  wsgiref.headers.Headers allows header newline injection

  User-controlled header names and values containing newlines can allow injecting HTTP headers.

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi
  Jan 20, 2026
• Medium 5.7
  CVE-2025-11468

  Folding email comments of unfoldable characters doesn't preserve parenthesis

  When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.

  Python Software Foundation CPython python3.6 python3.8 Debian Ubuntu Azure Linux Wolfi
  Jan 20, 2026

Revision history

1. 2026-11-12 #68

   Neue Updates von SUSE aufgenommen

2. 2026-10-07 #67

   Neue Updates von NetApp aufgenommen

3. 2026-09-14 #66

   Neue Updates von IBM aufgenommen

4. 2026-09-09 #65

   Neue Updates von SUSE aufgenommen

5. 2026-09-03 #64

   Neue Updates von Dell aufgenommen

6. 2026-08-31 #63

   Neue Updates von Dell aufgenommen

7. 2026-08-23 #62

   Neue Updates von SUSE aufgenommen

8. 2026-08-20 #61

   Neue Updates von openSUSE aufgenommen

9. 2026-08-19 #60

   Neue Updates von SUSE aufgenommen

10. 2026-07-26 #59

    Neue Updates von openSUSE aufgenommen

11. 2026-07-21 #58

    Neue Updates von Oracle Linux aufgenommen

12. 2026-07-19 #57

    Neue Updates von NetApp aufgenommen

13. 2026-07-09 #56

    Neue Updates von IBM aufgenommen

14. 2026-07-06 #55

    Neue Updates von Ubuntu aufgenommen

15. 2026-06-30 #54

    Neue Updates von Oracle Linux aufgenommen

16. 2026-06-29 #53

    Neue Updates von Oracle Linux aufgenommen

17. 2026-06-24 #52

    Neue Updates von Oracle Linux aufgenommen

18. 2026-06-22 #51

    Neue Updates von Oracle Linux aufgenommen

19. 2026-06-14 #50

    Neue Updates von openSUSE aufgenommen

20. 2026-06-11 #49

    Neue Updates von Red Hat aufgenommen

21. 2026-05-31 #48

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

22. 2026-05-28 #47

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

23. 2026-05-27 #46

    Neue Updates von Red Hat aufgenommen

24. 2026-05-19 #45

    Neue Updates von Red Hat aufgenommen

25. 2026-05-14 #44

    Neue Updates von Debian aufgenommen

References

• OSS Security Mailing List vom 2026-01-25
  https://seclists.org/oss-sec/2026/q1/111
• CVERecord vom 2026-01-25
  https://www.cve.org/CVERecord?id=CVE-2025-11468
• CVERecord vom 2026-01-25
  https://www.cve.org/CVERecord?id=CVE-2025-15366
• CVERecord vom 2026-01-25
  https://www.cve.org/CVERecord?id=CVE-2025-15367
• CVERecord vom 2026-01-25
  https://www.cve.org/CVERecord?id=CVE-2025-15282
• CVERecord vom 2026-01-25
  https://www.cve.org/CVERecord?id=CVE-2026-0672
• CVERecord vom 2026-01-25
  https://www.cve.org/CVERecord?id=CVE-2026-1299
• CVERecord vom 2026-01-25
  https://www.cve.org/CVERecord?id=CVE-2026-0865
• openSUSE Security Update OPENSUSE-SU-2026:10126-1 vom 2026-02-01
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CYYLEFH5WMD5V3AUPUWI4SKNSPWQXDB5/
• openSUSE Security Update OPENSUSE-SU-2026:10117-1 vom 2026-01-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZYGZGSXEAAHBRRLLOJZA6Y6R522LK6GE/
• Fedora Security Advisory FEDORA-2026-D68CA022B1 vom 2026-02-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-d68ca022b1
• Fedora Security Advisory FEDORA-2026-F5514402FD vom 2026-02-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-f5514402fd
• Red Hat Security Advisory RHSA-2026:2128 vom 2026-02-05
  https://access.redhat.com/errata/RHSA-2026:2128
• Ubuntu Security Notice USN-8018-1 vom 2026-02-05
  https://ubuntu.com/security/notices/USN-8018-1
• Oracle Linux Security Advisory ELSA-2026-2128 vom 2026-02-06
  http://linux.oracle.com/errata/ELSA-2026-2128.html
• openSUSE Security Update OPENSUSE-SU-2026:10152-1 vom 2026-02-06
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4OMGDU2QHH6HKUZN6HO52TFJZ5O4B343/
• Fedora Security Advisory FEDORA-2026-E0C0434EFB vom 2026-02-09
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-e0c0434efb
• Fedora Security Advisory FEDORA-2026-C8B3418F91 vom 2026-02-09
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-c8b3418f91
• openSUSE Security Update OPENSUSE-SU-2026:10200-1 vom 2026-02-14
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DZTEFN2UJEOJBPI343B5B3Q4AHXMIH5I/
• openSUSE Security Update OPENSUSE-SU-2026:10206-1 vom 2026-02-15
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4WTJGP6EBPPHYTF5IEPSNEIPTAO7CA6T/
• Fedora Security Advisory FEDORA-2026-289D6D4F69 vom 2026-02-19
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-289d6d4f69
• Fedora Security Advisory FEDORA-2026-CAD5404D98 vom 2026-02-19
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-cad5404d98
• Fedora Security Advisory FEDORA-2026-14A63BA868 vom 2026-02-19
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-14a63ba868
• openSUSE Security Update OPENSUSE-SU-2026:10221-1 vom 2026-02-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KEW75CD3DITCISPYD6PVUG433Q2SSTL2/
• openSUSE Security Update OPENSUSE-SU-2026:10223-1 vom 2026-02-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ACZJYQWA5RMTFG5UO6CWOND7QYIYBCAP/
• SUSE Security Update SUSE-SU-2026:0590-1 vom 2026-02-20
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024357.html
• SUSE Security Update SUSE-SU-2026:0613-1 vom 2026-02-24
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024382.html
• SUSE Security Update SUSE-SU-2026:0612-1 vom 2026-02-24
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024383.html
• Fedora Security Advisory FEDORA-2026-90382C6D3E vom 2026-02-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-90382c6d3e
• Fedora Security Advisory FEDORA-2026-4E99B7FE5F vom 2026-02-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-4e99b7fe5f
• SUSE Security Update SUSE-SU-2026:0645-1 vom 2026-02-26
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024402.html
• SUSE Security Update SUSE-SU-2026:0644-1 vom 2026-02-26
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024403.html
• SUSE Security Update SUSE-SU-2026:0643-1 vom 2026-02-26
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024404.html
• SUSE Security Update SUSE-SU-2026:0642-1 vom 2026-02-26
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024405.html
• Fedora Security Advisory FEDORA-2026-4C73011D81 vom 2026-02-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-4c73011d81
• Fedora Security Advisory FEDORA-2026-91D3384F04 vom 2026-02-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-91d3384f04
• SUSE Security Update SUSE-SU-2026:0664-1 vom 2026-02-27
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024446.html
• Fedora Security Advisory FEDORA-2026-48D2E7135B vom 2026-02-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-48d2e7135b
• Fedora Security Advisory FEDORA-2026-EF5D97522F vom 2026-02-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-ef5d97522f
• Fedora Security Advisory FEDORA-2026-8FA5A66A49 vom 2026-02-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-8fa5a66a49
• Fedora Security Advisory FEDORA-2026-489DC1BC1B vom 2026-02-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-489dc1bc1b
• Fedora Security Advisory FEDORA-2026-F17F6E94CA vom 2026-02-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-f17f6e94ca
• SUSE Security Update SUSE-SU-2026:0663-1 vom 2026-02-27
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024447.html
• SUSE Security Update SUSE-SU-2026:0693-1 vom 2026-02-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024502.html
• Fedora Security Advisory FEDORA-2026-3EBFC12A16 vom 2026-03-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-3ebfc12a16
• Fedora Security Advisory FEDORA-2026-05D833765A vom 2026-03-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-05d833765a
• SUSE Security Update SUSE-SU-2026:0767-1 vom 2026-03-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024550.html
• Amazon Linux Security Advisory ALAS2-2026-3185 vom 2026-03-06
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3185.html
• Amazon Linux Security Advisory ALAS2-2026-3184 vom 2026-03-06
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3184.html
• SUSE Security Update SUSE-SU-2026:20581-1 vom 2026-03-05
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024622.html
• SUSE Security Update SUSE-SU-2026:20543-1 vom 2026-03-05
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024596.html
• Ubuntu Security Notice USN-8018-2 vom 2026-03-09
  https://ubuntu.com/security/notices/USN-8018-2
• Red Hat Security Advisory RHSA-2026:4165 vom 2026-03-10
  https://access.redhat.com/errata/RHSA-2026:4165
• Oracle Linux Security Advisory ELSA-2026-4168 vom 2026-03-10
  https://linux.oracle.com/errata/ELSA-2026-4168.html
• Oracle Linux Security Advisory ELSA-2026-4165 vom 2026-03-10
  https://linux.oracle.com/errata/ELSA-2026-4165.html
• Red Hat Security Advisory RHSA-2026:4168 vom 2026-03-10
  https://access.redhat.com/errata/RHSA-2026:4168
• Rocky Linux Security Advisory RLSA-2026:4168 vom 2026-03-11
  https://errata.build.resf.org/RLSA-2026:4168
• Rocky Linux Security Advisory RLSA-2026:4165 vom 2026-03-11
  https://errata.build.resf.org/RLSA-2026:4165
• SUSE Security Update SUSE-SU-2026:0873-1 vom 2026-03-12
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024676.html
• Red Hat Security Advisory RHSA-2026:4216 vom 2026-03-12
  https://access.redhat.com/errata/RHSA-2026:4216
• Red Hat Security Advisory RHSA-2026:4463 vom 2026-03-12
  https://access.redhat.com/errata/RHSA-2026:4463
• Rocky Linux Security Advisory RLSA-2026:4216 vom 2026-03-12
  https://errata.build.resf.org/RLSA-2026:4216
• Rocky Linux Security Advisory RLSA-2026:4463 vom 2026-03-12
  https://errata.build.resf.org/RLSA-2026:4463
• Oracle Linux Security Advisory ELSA-2026-4216 vom 2026-03-13
  http://linux.oracle.com/errata/ELSA-2026-4216.html
• Oracle Linux Security Advisory ELSA-2026-4473 vom 2026-03-13
  http://linux.oracle.com/errata/ELSA-2026-4473.html
• Red Hat Security Advisory RHSA-2026:4473 vom 2026-03-12
  https://access.redhat.com/errata/RHSA-2026:4473
• Oracle Linux Security Advisory ELSA-2026-4463 vom 2026-03-12
  https://linux.oracle.com/errata/ELSA-2026-4463.html
• SUSE Security Update SUSE-SU-2026:0884-1 vom 2026-03-12
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024681.html
• Rocky Linux Security Advisory RLSA-2026:4473 vom 2026-03-13
  https://errata.build.resf.org/RLSA-2026:4473
• SUSE Security Update SUSE-SU-2026:0891-1 vom 2026-03-13
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024691.html
• SUSE Security Update SUSE-SU-2026:0897-1 vom 2026-03-13
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024695.html
• Red Hat Security Advisory RHSA-2026:4746 vom 2026-03-17
  https://access.redhat.com/errata/RHSA-2026:4746
• Oracle Linux Security Advisory ELSA-2026-4713 vom 2026-03-17
  https://linux.oracle.com/errata/ELSA-2026-4713.html
• Red Hat Security Advisory RHSA-2026:4713 vom 2026-03-17
  https://access.redhat.com/errata/RHSA-2026:4713
• SUSE Security Update SUSE-SU-2026:20710-1 vom 2026-03-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024716.html
• SUSE Security Update SUSE-SU-2026:20665-1 vom 2026-03-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-March/024748.html
• Red Hat Security Advisory RHSA-2026:4943 vom 2026-03-18
  https://access.redhat.com/errata/RHSA-2026:4943
• Ubuntu Security Notice USN-8018-3 vom 2026-03-19
  https://ubuntu.com/security/notices/USN-8018-3
• Red Hat Security Advisory RHSA-2026:5152 vom 2026-03-19
  https://access.redhat.com/errata/RHSA-2026:5152
• Red Hat Security Advisory RHSA-2026:5152 vom 2026-03-20
  https://access.redhat.com/errata/RHSA-2026:5152