The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".
CVSS Details
- CVSS 4.0 Base Score: 6 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-tkinterUpgrade python-unversioned-commandUpgrade platform-python-develUpgrade python3.12-develUpgrade python3.11-libsUpgrade python3-idleUpgrade python3.11-develUpgrade python3-develUpgrade python3.11-idleUpgrade python3.11-debugUpgrade python3.12-rpm-macrosUpgrade python3.12-testUpgrade platform-python-debugUpgrade python3-libsUpgrade platform-pythonUpgrade python3.11Upgrade python3.12-debugUpgrade python3Upgrade python3.12Upgrade python3-testUpgrade python3.11-rpm-macrosUpgrade python3.12-idleUpgrade python3.12-libsUpgrade python3.12-tkinterUpgrade python3.11-testUpgrade python3-debugUpgrade python3.11-tkinter | Feb 9, 2026 | Feb 5, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python3-debuginfoUpgrade python3-testUpgrade python3-libsUpgrade python3-develUpgrade python3-tkinterUpgrade python3-debugUpgrade python3-toolsUpgrade python3 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3.13-tkinterUpgrade python3.9-debuginfoUpgrade python3.13-debugsourceUpgrade python3.12-testUpgrade python3-develUpgrade python3-libsUpgrade python3.11-idleUpgrade python3.13-debugUpgrade python3.13-freethreading-debugUpgrade python3-idleUpgrade python3.12-idleUpgrade python3.13-freethreadingUpgrade python3.12-develUpgrade python3.11-libsUpgrade python3.13-develUpgrade python3.13-testUpgrade python-unversioned-commandUpgrade python3.11-debuginfoUpgrade python3.13-idleUpgrade python3.11-debugUpgrade python3.11-tkinterUpgrade python3.11-debugsourceUpgrade python3.13-libsUpgrade python3.12-debugUpgrade python3.12-debugsourceUpgrade python3.12-debuginfoUpgrade python3.9-debugsourceUpgrade python3.12-libsUpgrade python3.12Upgrade python3.13Upgrade python3.13-debuginfoUpgrade python3.11-testUpgrade python3-tkinterUpgrade python3.12-tkinterUpgrade python3.11-develUpgrade python3.11Upgrade python3-debugUpgrade python3-testUpgrade python3 | Feb 20, 2026 | Jan 23, 2026 |
| Debian | — | Upgrade python3.11Upgrade python3.9Upgrade python3.13 | Jan 27, 2026 | Jan 27, 2026 |
| Freebsd | — | Upgrade python312Upgrade python311Upgrade python313Upgrade python313tUpgrade python314Upgrade python310 | Feb 12, 2026 | Feb 4, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jun 2, 2026 |
| Oracle_linux | — | Upgrade python3.11-testUpgrade python3-idleUpgrade platform-pythonUpgrade python3.11-libsUpgrade python3.12-debugUpgrade platform-python-debugUpgrade python3.12-develUpgrade platform-python-develUpgrade python3.12-rpm-macrosUpgrade python3.11-tkinterUpgrade python3.11Upgrade python-unversioned-commandUpgrade python3.12-testUpgrade python3.12-libsUpgrade python3Upgrade python3.12-idleUpgrade python3-debugUpgrade python3.12Upgrade python3-develUpgrade python3-tkinterUpgrade python3-libsUpgrade python3.11-rpm-macrosUpgrade python3.11-idleUpgrade python3.12-tkinterUpgrade python3.11-develUpgrade python3.11-debugUpgrade python3-test | Feb 9, 2026 | Jan 23, 2026 |
| Redhat_linux | — | Upgrade python3.11-libsUpgrade python3-debuginfoUpgrade platform-python-debugUpgrade platform-python-develUpgrade python3.12-develUpgrade python-unversioned-commandUpgrade python3.11-tkinterUpgrade python3.12-testUpgrade platform-pythonUpgrade python3.12-debugsourceUpgrade python3.11-testUpgrade python3.11Upgrade python3.12-debugUpgrade python3.9-debugsourceUpgrade python3.11-debugUpgrade python3.9-debuginfoUpgrade python3Upgrade python3.12-libsUpgrade python3.12-rpm-macrosUpgrade python3-idleUpgrade python3-libsUpgrade python3-develUpgrade python3.12-idleUpgrade python3.11-debugsourceUpgrade python3.11-rpm-macrosUpgrade python3-testUpgrade python3.11-develUpgrade python3.12-debuginfoUpgrade python3-debugsourceUpgrade python3.11-idleUpgrade python3.11-debuginfoUpgrade python3.12-tkinterUpgrade python3.12No solution existsUpgrade python3-debugUpgrade python3-tkinter | Mar 13, 2026 | Jan 23, 2026 |
| Rocky_linux | — | Upgrade python3-debugUpgrade python3.12Upgrade platform-pythonUpgrade python3.12-debuginfoUpgrade platform-python-debugUpgrade python3-testUpgrade python3.11-libsUpgrade python3.12-testUpgrade python3.11-idleUpgrade python3.11-debuginfoUpgrade python3.12-idleUpgrade platform-python-develUpgrade python3.11Upgrade python3.12-debugsourceUpgrade python3.11-debugsourceUpgrade python3.9-debuginfoUpgrade python3-develUpgrade python3.12-debugUpgrade python3.9-debugsourceUpgrade python3.11-debugUpgrade python3-tkinterUpgrade python3Upgrade python3.11-tkinterUpgrade python3.12-libsUpgrade python3-libsUpgrade python3.11-develUpgrade python3-idleUpgrade python3.12-tkinterUpgrade python3.12-develUpgrade python3.11-test | Mar 12, 2026 | Mar 11, 2026 |
| Suse | — | Upgrade python312-testsuiteUpgrade python312-tkUpgrade python313-doc-devhelpUpgrade python313-nogil-testsuiteUpgrade python313-nogil-baseUpgrade python313-nogil-toolsUpgrade python36-develUpgrade python312-idleUpgrade python3-testsuiteUpgrade python311-doc-devhelpUpgrade python3-docUpgrade python312Upgrade python313-nogilUpgrade python-xmlUpgrade libpython3_4m1_0Upgrade python313Upgrade python314-x86-64-v3Upgrade libpython3_11-1_0-32bitUpgrade python36-baseUpgrade python313-testsuiteUpgrade python310-docUpgrade python-develUpgrade libpython2_7-1_0-32bitUpgrade python3-tkUpgrade python314-tkUpgrade python3-toolsUpgrade python314-toolsUpgrade python3-idleUpgrade python310-testsuiteUpgrade python312-dbmUpgrade libpython3_14-1_0-x86-64-v3Upgrade python311-toolsUpgrade python312-baseUpgrade python311-dbmUpgrade python313-nogil-develUpgrade libpython3_13-1_0-x86-64-v3Upgrade python-gdbmUpgrade python311Upgrade libpython3_12-1_0Upgrade python313-baseUpgrade python313-nogil-cursesUpgrade python313-base-x86-64-v3Upgrade python-base-32bitUpgrade python-32bitUpgrade python314-docUpgrade python313-develUpgrade python314-develUpgrade python3-develUpgrade python314-base-x86-64-v3Upgrade python310Upgrade python313-tkUpgrade python311-base-32bitUpgrade python312-toolsUpgrade python311-docUpgrade python3Upgrade python310-tkUpgrade python-demoUpgrade libpython2_7-1_0Upgrade python310-toolsUpgrade python312-develUpgrade python311-develUpgrade python312-cursesUpgrade python3-baseUpgrade python314-cursesUpgrade python313-nogil-dbmUpgrade python311-idleUpgrade python-doc-pdfUpgrade python-docUpgrade libpython3_13t1_0Upgrade libpython3_6m1_0Upgrade python313-idleUpgrade python311-testsuiteUpgrade python310-dbmUpgrade python-tkUpgrade libpython3_13-1_0Upgrade python-baseUpgrade python311-tkUpgrade python3-dbmUpgrade python-idleUpgrade python-cursesUpgrade libpython3_4m1_0-32bitUpgrade python310-cursesUpgrade python312-base-32bitUpgrade python312-32bitUpgrade python314-idleUpgrade python312-doc-devhelpUpgrade python3-doc-devhelpUpgrade python310-base-32bitUpgrade python312-docUpgrade python310-develUpgrade libpython3_10-1_0-32bitUpgrade python314Upgrade python313-toolsUpgrade python313-cursesUpgrade libpython3_10-1_0Upgrade python313-nogil-idleUpgrade python311-baseUpgrade python310-baseUpgrade python311-cursesUpgrade libpython3_12-1_0-32bitUpgrade libpython3_11-1_0Upgrade python314-dbmUpgrade python313-dbmUpgrade python36Upgrade python310-32bitUpgrade python314-baseUpgrade python313-x86-64-v3Upgrade python313-nogil-tkUpgrade python310-doc-devhelpUpgrade pythonUpgrade libpython3_6m1_0-32bitUpgrade python313-docUpgrade python311-32bitUpgrade python3-cursesUpgrade python310-idleUpgrade python314-doc-devhelpUpgrade libpython3_14-1_0 | Feb 23, 2026 | Feb 7, 2026 |
| Ubuntu | — | Upgrade libpython3.10Upgrade libpython3.12t64Upgrade libpython3.14Upgrade python3.14Upgrade python3.12Upgrade python3.10 | May 25, 2026 | Jan 23, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub