Описание
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| python3.14 | fixed | 3.14.3-1 | package | |
| python3.13 | fixed | 3.13.12-1 | package | |
| python3.13 | fixed | 3.13.5-2+deb13u1 | trixie | package |
| python3.11 | removed | package | ||
| python3.11 | fixed | 3.11.2-6+deb12u7 | bookworm | package |
| python3.9 | removed | package | ||
| python2.7 | not-affected | package | ||
| pypy3 | fixed | 7.3.21+dfsg-1 | package | |
| pypy3 | no-dsa | trixie | package | |
| pypy3 | no-dsa | bookworm | package | |
| pypy3 | postponed | bullseye | package | |
| jython | not-affected | package |
Примечания
https://github.com/python/cpython/issues/143935
https://github.com/python/cpython/pull/143936
Fixed by: https://github.com/python/cpython/commit/17d1490aa97bd6b98a42b1a9b324ead84e7fd8a2 (main)
Fixed by: https://github.com/python/cpython/commit/61614a5e5056e4f61ced65008d4576f3df34acb6 (3.14 branch)
Fixed by: https://github.com/python/cpython/commit/f738386838021c762efea6c9802c82de65e87796 (3.13 branch)
Fixed by: https://github.com/python/cpython/commit/e9970f077240c7c670e8a6fc6662f2b30d3b6ad0 (3.11 branch)
Связанные уязвимости
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
Уязвимость интерпретатора языка программирования Python, позволяющая нарушителю оказать воздействие на целостность данных