CVE-2025-1795

EUVD-2025-5930
During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
PSFCNA
2.3 LOW
NETWORK
HIGH
LOW
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 47.13%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
pythoncpython
𝑥
< 3.9.23
CNA
pythoncpython
3.10.0 ≤
𝑥
< 3.10.17
CNA
pythoncpython
3.11.0 ≤
𝑥
< 3.11.9
CNA
pythoncpython
3.12.0 ≤
𝑥
< 3.12.3
CNA
Debian logo
Debian Releases
Debian Product
Codename
pypy3
bookworm
no-dsa
bullseye
vulnerable
bullseye (security)
7.3.5+dfsg-2+deb11u5
fixed
forky
7.3.23+dfsg-1
fixed
sid
7.3.23+dfsg-1
fixed
trixie
7.3.19+dfsg-2
fixed
python3.11
bookworm
3.11.2-6+deb12u8
fixed
bookworm (security)
vulnerable
python3.13
forky
3.13.15-1
fixed
sid
3.13.15-1
fixed
trixie
3.13.5-2+deb13u3
fixed
python3.9
bullseye
vulnerable
bullseye (security)
3.9.2-1+deb11u7
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.7
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
not-affected
xenial
not-affected
python3.10
focal
dne
jammy
Fixed 3.10.12-1~22.04.10
released
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
python3.11
focal
dne
jammy
Fixed 3.11.0~rc1-1~22.04.1~esm4
released
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
python3.12
focal
dne
jammy
dne
noble
Fixed 3.12.3-1ubuntu0.6
released
oracular
not-affected
plucky
dne
questing
dne
resolute
dne
python3.13
focal
dne
jammy
dne
noble
dne
oracular
not-affected
plucky
not-affected
questing
not-affected
resolute
dne
python3.14
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
not-affected
resolute
not-affected
python3.4
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
ignored
python3.5
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
ignored
xenial
ignored
python3.6
bionic
Fixed 3.6.9-1~18.04ubuntu1.13+esm5
released
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
python3.7
bionic
Fixed 3.7.5-2ubuntu1~18.04.2+esm6
released
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
python3.8
bionic
Fixed 3.8.0-3ubuntu1~18.04.2+esm5
released
focal
Fixed 3.8.10-0ubuntu1~20.04.18+esm1
released
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
python3.9
focal
Fixed 3.9.5-3ubuntu0~20.04.1+esm5
released
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libpython3_11-1_0
suse enterprise desktop 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise desktop 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise sap 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise server 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP7
3.11.11-150600.3.21.1
fixed
libpython3_12-1_0
suse enterprise desktop 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise server 15 SP6
3.12.9-150600.3.21.1
fixed
libpython3_13-1_0
suse enterprise desktop 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise sap 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise server 15 SP7
3.13.5-150700.4.11.1
fixed
python311
suse enterprise desktop 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise desktop 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise sap 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise server 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP7
3.11.11-150600.3.21.1
fixed
python311-base
suse enterprise desktop 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise desktop 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise sap 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise server 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP7
3.11.11-150600.3.21.1
fixed
python311-curses
suse enterprise desktop 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise desktop 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise server 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP7
3.11.11-150600.3.21.1
fixed
python311-dbm
suse enterprise desktop 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise desktop 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise server 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP7
3.11.11-150600.3.21.1
fixed
python311-devel
suse enterprise desktop 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise desktop 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise server 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP7
3.11.11-150600.3.21.1
fixed
python311-doc
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
python311-doc-devhelp
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
python311-idle
suse enterprise desktop 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise desktop 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise server 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP7
3.11.11-150600.3.21.1
fixed
python311-tk
suse enterprise desktop 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise desktop 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise server 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP7
3.11.11-150600.3.21.1
fixed
python311-tools
suse enterprise desktop 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise desktop 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise sap 15 SP7
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP4
3.11.11-150400.9.49.1
fixed
suse enterprise server 15 SP6
3.11.11-150600.3.21.1
fixed
suse enterprise server 15 SP7
3.11.11-150600.3.21.1
fixed
python312
suse enterprise desktop 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise server 15 SP6
3.12.9-150600.3.21.1
fixed
python312-base
suse enterprise desktop 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise server 15 SP6
3.12.9-150600.3.21.1
fixed
python312-curses
suse enterprise desktop 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise server 15 SP6
3.12.9-150600.3.21.1
fixed
python312-dbm
suse enterprise desktop 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise server 15 SP6
3.12.9-150600.3.21.1
fixed
python312-devel
suse enterprise desktop 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise server 15 SP6
3.12.9-150600.3.21.1
fixed
python312-idle
suse enterprise desktop 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise server 15 SP6
3.12.9-150600.3.21.1
fixed
python312-tk
suse enterprise desktop 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise server 15 SP6
3.12.9-150600.3.21.1
fixed
python312-tools
suse enterprise desktop 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise sap 15 SP6
3.12.9-150600.3.21.1
fixed
suse enterprise server 15 SP6
3.12.9-150600.3.21.1
fixed
python313
suse enterprise desktop 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise sap 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise server 15 SP7
3.13.5-150700.4.11.1
fixed
python313-base
suse enterprise desktop 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise sap 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise server 15 SP7
3.13.5-150700.4.11.1
fixed
python313-curses
suse enterprise desktop 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise sap 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise server 15 SP7
3.13.5-150700.4.11.1
fixed
python313-dbm
suse enterprise desktop 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise sap 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise server 15 SP7
3.13.5-150700.4.11.1
fixed
python313-devel
suse enterprise desktop 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise sap 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise server 15 SP7
3.13.5-150700.4.11.1
fixed
python313-idle
suse enterprise desktop 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise sap 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise server 15 SP7
3.13.5-150700.4.11.1
fixed
python313-tk
suse enterprise desktop 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise sap 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise server 15 SP7
3.13.5-150700.4.11.1
fixed
python313-tools
suse enterprise desktop 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise sap 15 SP7
3.13.5-150700.4.11.1
fixed
suse enterprise server 15 SP7
3.13.5-150700.4.11.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
python-unversioned-command
Amazon Linux 2023
0:3.9.21-1.amzn2023.0.3
fixed
python3
Amazon Linux 2
0:3.7.16-1.amzn2.0.15
fixed
Amazon Linux 2023
0:3.9.21-1.amzn2023.0.3
fixed
python3-debug
Amazon Linux 2
0:3.7.16-1.amzn2.0.15
fixed
Amazon Linux 2023
0:3.9.21-1.amzn2023.0.3
fixed
python3-debuginfo
Amazon Linux 2
0:3.7.16-1.amzn2.0.15
fixed
python3-devel
Amazon Linux 2
0:3.7.16-1.amzn2.0.15
fixed
Amazon Linux 2023
0:3.9.21-1.amzn2023.0.3
fixed
python3-idle
Amazon Linux 2023
0:3.9.21-1.amzn2023.0.3
fixed
python3-libs
Amazon Linux 2
0:3.7.16-1.amzn2.0.15
fixed
Amazon Linux 2023
0:3.9.21-1.amzn2023.0.3
fixed
python3-test
Amazon Linux 2
0:3.7.16-1.amzn2.0.15
fixed
Amazon Linux 2023
0:3.9.21-1.amzn2023.0.3
fixed
python3-tkinter
Amazon Linux 2
0:3.7.16-1.amzn2.0.15
fixed
Amazon Linux 2023
0:3.9.21-1.amzn2023.0.3
fixed
python3-tools
Amazon Linux 2
0:3.7.16-1.amzn2.0.15
fixed
python3.11
Amazon Linux 2023
0:3.11.11-5.amzn2023.0.1
fixed
python3.11-debug
Amazon Linux 2023
0:3.11.11-5.amzn2023.0.1
fixed
python3.11-debuginfo
Amazon Linux 2023
0:3.11.11-5.amzn2023.0.1
fixed
python3.11-debugsource
Amazon Linux 2023
0:3.11.11-5.amzn2023.0.1
fixed
python3.11-devel
Amazon Linux 2023
0:3.11.11-5.amzn2023.0.1
fixed
python3.11-idle
Amazon Linux 2023
0:3.11.11-5.amzn2023.0.1
fixed
python3.11-libs
Amazon Linux 2023
0:3.11.11-5.amzn2023.0.1
fixed
python3.11-test
Amazon Linux 2023
0:3.11.11-5.amzn2023.0.1
fixed
python3.11-tkinter
Amazon Linux 2023
0:3.11.11-5.amzn2023.0.1
fixed
python3.9-debuginfo
Amazon Linux 2023
0:3.9.21-1.amzn2023.0.3
fixed
python3.9-debugsource
Amazon Linux 2023
0:3.9.21-1.amzn2023.0.3
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
python3
CBL-Mariner 2.0
0:3.9.19-12.cm2
fixed
Common Weakness Enumeration
References
https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48
https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593
https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74
https://github.com/python/cpython/commit/a4ef689ce670684ec132204b1cd03720c8e0a03d
https://github.com/python/cpython/commit/d4df3c55e4c5513947f907f24766b34d2ae8c090
https://github.com/python/cpython/issues/100884
https://github.com/python/cpython/pull/100885
https://github.com/python/cpython/pull/119099
https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/
https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html