https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:39:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11593 bdu:2025-11593 https://cve.radiocsirt.org/vuln/bdu:2025-11593 https://cve.radiocsirt.org/vuln/bit-libpython-2025-1795 <p><strong>Affected:</strong> Bitnami: libpython</p> <p>During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.</p> <p><strong>Affected:</strong> Bitnami: libpython</p> <p>During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.</p> https://cve.radiocsirt.org/vuln/bit-libpython-2025-1795 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0171 certfr-2025-avi-0171 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0171 https://cve.radiocsirt.org/vuln/euvd-2026-343272 EUVD-2026-343272 https://cve.radiocsirt.org/vuln/euvd-2026-343272 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1795 <p>During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.</p> <p>During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-1795 https://cve.radiocsirt.org/vuln/ghsa-c266-vjjr-2v8j <p>During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.</p> <p>During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.</p> https://cve.radiocsirt.org/vuln/ghsa-c266-vjjr-2v8j https://cve.radiocsirt.org/vuln/msrc_cve-2025-1795 msrc_CVE-2025-1795 https://cve.radiocsirt.org/vuln/msrc_cve-2025-1795 https://cve.radiocsirt.org/vuln/oesa-2025-2290 <p><strong>Affected:</strong> openEuler:24.03-LTS: python3</p> <p>Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. Security Fix(es):</p> <p>During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.(CVE-2025-1795)</p> <p>There is an issue in CPython when using `bytes.decode(&amp;quot;unicode_escape&amp;quot;, error=&amp;quot;ignore|replace&amp;quot;)`. If you are not using the &amp;quot;unicode_escape&amp;quot; encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError.(CVE-2025-4516)</p> <p>There is a defect in the CPython &amp;apos;tarfile&amp;apos; module affecting the &amp;apos;TarFile&amp;apos; extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infi…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: python3</p> <p>Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. Security Fix(es):</p> <p>During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.(CVE-2025-1795)</p> <p>There is an issue in CPython when using `bytes.decode(&amp;quot;unicode_escape&amp;quot;, error=&amp;quot;ignore|replace&amp;quot;)`. If you are not using the &amp;quot;unicode_escape&amp;quot; encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError.(CVE-2025-4516)</p> <p>There is a defect in the CPython &amp;apos;tarfile&amp;apos; module affecting the &amp;apos;TarFile&amp;apos; extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infi…</p> https://cve.radiocsirt.org/vuln/oesa-2025-2290 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14872-1 <p>python311-3.11.11-4.1 on GA media</p> <p>python311-3.11.11-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14872-1 https://cve.radiocsirt.org/vuln/suse-su-2025:0883-1 <p>Security update for python312</p> <p>Security update for python312</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0883-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-1795 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.9, Ubuntu:22.04:LTS: python3.10, Ubuntu:Pro:22.04:LTS: python3.11 and 1 more</p> <p>During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.9, Ubuntu:22.04:LTS: python3.10, Ubuntu:Pro:22.04:LTS: python3.11 and 1 more</p> <p>During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-1795 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0471 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Python ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Python ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0471