REDHAT-BUG-2432437: Medium severity Python Python email (email.BytesGenerator) vulnerability
The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2432437?
The severity of REDHAT-BUG-2432437 is categorized as a moderate risk due to potential header injection vulnerabilities.
How do I fix REDHAT-BUG-2432437?
To fix REDHAT-BUG-2432437, update to the patched version of Python that resolves the header quoting issue in the "BytesGenerator" class.
What is the impact of REDHAT-BUG-2432437?
The impact of REDHAT-BUG-2432437 allows for header injection in serialized email messages, potentially leading to email spoofing.
Which versions of Python are affected by REDHAT-BUG-2432437?
The affected versions of Python are those that utilize the email module's BytesGenerator without proper newline quoting.
Is REDHAT-BUG-2432437 a widespread vulnerability?
Yes, REDHAT-BUG-2432437 is considered widespread as it affects common email functionalities across various Python applications.