Skip to content
OpenAdvisories
Low · 2.3 CVE-2025-1795 EUVD-2025-5930GHSA-c266-vjjr-2v8j

Mishandling of comma during folding and unicode-encoding of email headers

Published Feb 28, 2025 · Updated Jul 31, 2026 · Assigned by PSF

Vendor: Python Software Foundation Product: CPython Package: pypy3 Package: python-3.10 Package: python3 Package: python3.10 Package: python3.11 Package: python3.11 Package: python3.12 Package: python3.13 Package: python3.4 Package: python3.5 Package: python3.6 Package: python3.7 Package: python3.8 Package: python3.9 Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu Ecosystem: Wolfi

Description

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.

Affected products

VendorProductAffectedFixed
Python Software Foundation CPython < 3.9.23, 3.10.0 – < 3.10.17, 3.11.0 – < 3.11.9, 3.12.0 – < 3.12.3, 3.13.0a1 – < 3.13.0a5 3.9.23

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 pypy3 7.3.18+dfsg-1 —
Debian 13 pypy3 7.3.18+dfsg-1 —
Debian 13 python3.13 3.13.0~b1-1 —
Debian 12 pypy3 No fix yet —
Debian 12 python3.11 3.11.2-6+deb12u6 —
Debian 11 pypy3 7.3.5+dfsg-2+deb11u5 DLA-4354-1
Debian 11 python3.9 3.9.2-1+deb11u3 DLA-4087-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS python3.12 3.12.3-1ubuntu0.6 USN-7570-1
Ubuntu 22.04 LTS python3.10 3.10.12-1~22.04.10 USN-7570-1
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS python3.11 3.11.0~rc1-1~22.04.1~esm4 USN-7570-1
Ubuntu Pro 20.04 LTS python3.8 3.8.10-0ubuntu1~20.04.18+esm1 USN-7570-1
Ubuntu Pro 20.04 LTS python3.9 3.9.5-3ubuntu0~20.04.1+esm5 USN-7570-1
Ubuntu Pro 18.04 LTS python3.6 3.6.9-1~18.04ubuntu1.13+esm5 USN-7570-1
Ubuntu Pro 18.04 LTS python3.7 3.7.5-2ubuntu1~18.04.2+esm6 USN-7570-1
Ubuntu Pro 18.04 LTS python3.8 3.8.0-3ubuntu1~18.04.2+esm5 USN-7570-1
Ubuntu Pro 16.04 LTS python3.5 No fix yet —
Ubuntu Pro 14.04 LTS python3.4 +1 No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 python311-core 3.11.11-150600.3.21.1 SUSE-SU-2025:0982-1
SLES 15 SP4 python311 +1 3.11.11-150400.9.49.1 SUSE-SU-2025:0981-1
SLES 3 python311 +1 3.11.11-150600.3.21.1 SUSE-SU-2025:0982-1
SLES 3 python312 +1 3.12.9-150600.3.21.1 SUSE-SU-2025:0883-1
SLES 3 python313 +1 3.13.5-150700.4.11.1 SUSE-SU-2025:02074-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLE Micro 6.1 python311 +1 3.11.12-slfo.1.1_1.1 SUSE-SU-2025:20374-1
SLE Micro 6.0 python311 +1 3.11.11-1.1 SUSE-SU-2025:20154-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python311 3.11.11-4.1 openSUSE-SU-2025:14872-1
openSUSE Tumbleweed python312 3.12.9-2.1 openSUSE-SU-2025:14873-1
openSUSE Tumbleweed python313 3.13.2-3.1 openSUSE-SU-2025:14885-1
openSUSE Leap 15.6 python311 +2 3.11.11-150600.3.21.1 SUSE-SU-2025:0982-1
openSUSE Leap 15.6 python312 +2 3.12.9-150600.3.21.1 SUSE-SU-2025:0883-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3 +7 3.9.21-1.amzn2023.0.3 ALAS2023-2025-917
Amazon Linux 2023 python3.11 +6 3.11.11-5.amzn2023.0.1 ALAS2023-2025-871
Amazon Linux 2 python3 +6 3.7.16-1.amzn2.0.15 ALAS2-2025-2808

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) python3 3.9.19-13 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling python-3.10 3.10.17-r0 —

Advisories 18

References