The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".
CVSS Details
- CVSS 4.0 Base Score: 6 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3.12-debugUpgrade python3.11Upgrade python3.11-rpm-macrosUpgrade python3.11-tkinterUpgrade python3.12-idleUpgrade python3.12Upgrade python3-testUpgrade python3Upgrade python3.11-testUpgrade python3-debugUpgrade python3.12-tkinterUpgrade python3.12-libsUpgrade platform-pythonUpgrade python3.11-develUpgrade python3-libsUpgrade python3-idleUpgrade python3.12-develUpgrade python3-develUpgrade python3-tkinterUpgrade python3.11-libsUpgrade python3.11-idleUpgrade platform-python-debugUpgrade python3.12-testUpgrade python3.12-rpm-macrosUpgrade python-unversioned-commandUpgrade platform-python-develUpgrade python3.11-debug | Feb 9, 2026 | Feb 5, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python3-tkinterUpgrade python3-debugUpgrade python3Upgrade python3-toolsUpgrade python3-develUpgrade python3-libsUpgrade python3-debuginfoUpgrade python3-test | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3.13-testUpgrade python3.13-develUpgrade python3.12-develUpgrade python3.11-libsUpgrade python3.13-debugsourceUpgrade python3.9-debuginfoUpgrade python3.13-idleUpgrade python3.13-tkinterUpgrade python3.12-testUpgrade python3.11-idleUpgrade python3.13-freethreading-debugUpgrade python3.13-debugUpgrade python3.13-freethreadingUpgrade python3-develUpgrade python3.12-idleUpgrade python3-libsUpgrade python3-idleUpgrade python-unversioned-commandUpgrade python3.11-debuginfoUpgrade python3.11-tkinterUpgrade python3.11-debugUpgrade python3.11-debugsourceUpgrade python3-debugUpgrade python3.12-debugUpgrade python3.11-testUpgrade python3.13Upgrade python3.12-tkinterUpgrade python3.11-develUpgrade python3Upgrade python3-testUpgrade python3.13-libsUpgrade python3.13-debuginfoUpgrade python3.9-debugsourceUpgrade python3.12-libsUpgrade python3.12-debugsourceUpgrade python3.12-debuginfoUpgrade python3.12Upgrade python3-tkinterUpgrade python3.11 | Feb 20, 2026 | Jan 23, 2026 |
| Debian | — | Upgrade python3.9Upgrade python3.11Upgrade python3.13 | Jan 27, 2026 | Jan 27, 2026 |
| Freebsd | — | Upgrade python312Upgrade python311Upgrade python314Upgrade python310Upgrade python313tUpgrade python313 | Feb 12, 2026 | Feb 4, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jun 2, 2026 |
| Oracle_linux | — | Upgrade python3-tkinterUpgrade python3-libsUpgrade python3.11-idleUpgrade python3-debugUpgrade python3.11-debugUpgrade python3.12Upgrade python3-testUpgrade python3.11-rpm-macrosUpgrade python3.12-tkinterUpgrade python3.11-develUpgrade python3-develUpgrade python3.12-debugUpgrade python3-idleUpgrade python3.12-develUpgrade python3.11-testUpgrade python-unversioned-commandUpgrade platform-python-develUpgrade python3.12-rpm-macrosUpgrade python3.11-tkinterUpgrade python3.12-idleUpgrade platform-python-debugUpgrade python3.12-libsUpgrade python3Upgrade python3.11-libsUpgrade platform-pythonUpgrade python3.11Upgrade python3.12-test | Feb 9, 2026 | Jan 23, 2026 |
| Redhat_linux | — | Upgrade python3.12-testUpgrade python3-libsUpgrade python3.11-libsUpgrade python3-idleUpgrade python3-develUpgrade python3.9-debuginfoUpgrade python3.11-tkinterUpgrade platform-pythonUpgrade python3Upgrade python3.11-debugUpgrade platform-python-debugUpgrade python3.12-rpm-macrosUpgrade python3.11-testUpgrade python3.12-libsUpgrade python3-debuginfoUpgrade python-unversioned-commandUpgrade python3.12-idleUpgrade platform-python-develUpgrade python3.12-debugUpgrade python3.11Upgrade python3.12-debugsourceUpgrade python3.12-develUpgrade python3.9-debugsourceUpgrade python3-debugUpgrade python3.11-develUpgrade python3.11-idleUpgrade python3-testUpgrade python3.11-debugsourceUpgrade python3.12-debuginfoUpgrade python3.11-rpm-macrosNo solution existsUpgrade python3.12Upgrade python3.12-tkinterUpgrade python3-debugsourceUpgrade python3-tkinterUpgrade python3.11-debuginfo | Mar 13, 2026 | Jan 23, 2026 |
| Rocky_linux | — | Upgrade platform-python-develUpgrade python3-debugUpgrade python3.12-testUpgrade platform-pythonUpgrade python3.11-libsUpgrade python3.12-debuginfoUpgrade python3.11-debuginfoUpgrade python3.11-idleUpgrade platform-python-debugUpgrade python3-testUpgrade python3.12Upgrade python3.12-idleUpgrade python3.12-libsUpgrade python3-libsUpgrade python3.11-develUpgrade python3.11-debugsourceUpgrade python3.11-debugUpgrade python3Upgrade python3-tkinterUpgrade python3.12-debugUpgrade python3.9-debugsourceUpgrade python3.12-debugsourceUpgrade python3.11-tkinterUpgrade python3.11-testUpgrade python3-develUpgrade python3-idleUpgrade python3.12-develUpgrade python3.9-debuginfoUpgrade python3.11Upgrade python3.12-tkinter | Mar 12, 2026 | Mar 11, 2026 |
| Suse | — | Upgrade python3-docUpgrade libpython2_7-1_0-32bitUpgrade python313-nogil-baseUpgrade python310-testsuiteUpgrade python313-nogil-toolsUpgrade python313-base-x86-64-v3Upgrade python311Upgrade python3-testsuiteUpgrade python311-doc-devhelpUpgrade python-32bitUpgrade python312Upgrade libpython3_13-1_0-x86-64-v3Upgrade libpython3_4m1_0Upgrade python36-develUpgrade python313-doc-devhelpUpgrade python312-tkUpgrade python313-nogil-testsuiteUpgrade python313-nogil-cursesUpgrade python313-nogilUpgrade python311-dbmUpgrade python311-toolsUpgrade python3Upgrade python3-baseUpgrade python314-docUpgrade python311-docUpgrade python311-base-32bitUpgrade python313-develUpgrade python314-develUpgrade python-xmlUpgrade python312-develUpgrade libpython2_7-1_0Upgrade python312-toolsUpgrade python3-develUpgrade python313-tkUpgrade python314-base-x86-64-v3Upgrade python310Upgrade python313-baseUpgrade python-demoUpgrade python311-develUpgrade python312-cursesUpgrade python310-tkUpgrade python310-toolsUpgrade python312-idleUpgrade python312-testsuiteUpgrade python312-baseUpgrade python313-testsuiteUpgrade python314-tkUpgrade python314-x86-64-v3Upgrade python-develUpgrade python3-tkUpgrade python3-toolsUpgrade python313Upgrade python310-docUpgrade libpython3_11-1_0-32bitUpgrade libpython3_14-1_0-x86-64-v3Upgrade python36-baseUpgrade python-base-32bitUpgrade python-gdbmUpgrade python313-nogil-develUpgrade python3-idleUpgrade python314-toolsUpgrade python312-dbmUpgrade libpython3_12-1_0Upgrade python310-baseUpgrade python314-dbmUpgrade python313-dbmUpgrade python311-cursesUpgrade python312-base-32bitUpgrade python313-nogil-dbmUpgrade python36Upgrade python313-nogil-idleUpgrade python311-baseUpgrade python310-32bitUpgrade python3-dbmUpgrade python-idleUpgrade python-cursesUpgrade libpython3_4m1_0-32bitUpgrade libpython3_12-1_0-32bitUpgrade python312-32bitUpgrade python310-cursesUpgrade python3-doc-devhelpUpgrade python314-idleUpgrade python312-doc-devhelpUpgrade libpython3_11-1_0Upgrade python311-idleUpgrade python-tkUpgrade python-baseUpgrade python314-baseUpgrade python310-doc-devhelpUpgrade python313-x86-64-v3Upgrade python313-nogil-tkUpgrade libpython3_13-1_0Upgrade python310-idleUpgrade libpython3_10-1_0-32bitUpgrade libpython3_10-1_0Upgrade python314Upgrade python313-toolsUpgrade python313-cursesUpgrade python312-docUpgrade python310-develUpgrade python310-base-32bitUpgrade libpython3_6m1_0Upgrade python314-doc-devhelpUpgrade python311-tkUpgrade python311-testsuiteUpgrade python310-dbmUpgrade python313-idleUpgrade libpython3_14-1_0Upgrade libpython3_13t1_0Upgrade python314-cursesUpgrade python313-docUpgrade python311-32bitUpgrade python3-cursesUpgrade python-doc-pdfUpgrade pythonUpgrade libpython3_6m1_0-32bitUpgrade python-doc | Feb 23, 2026 | Feb 7, 2026 |
| Ubuntu | — | Upgrade libpython3.12t64Upgrade python3.10Upgrade libpython3.14Upgrade python3.12Upgrade python3.14Upgrade libpython3.10 | May 25, 2026 | Jan 23, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub