https://seclists.org/oss-sec/2024/q1/87: Python standard library defaults to insecure TLS for mail protocols
Published Feb 1, 2024
·Updated
Affected Software
1 affected component
Python Software Foundation Python
Frequently Asked Questions
1
What is the severity of CVE-2024-12345?
The severity of CVE-2024-12345 is classified as high due to the potential for unauthorized data interception.
2
How do I fix CVE-2024-12345?
To fix CVE-2024-12345, update your Python installation to a version that enforces secure TLS settings for mail protocols.
3
What mail protocols are affected by CVE-2024-12345?
CVE-2024-12345 affects SMTP, POP3, and IMAP protocols in the Python standard library.
4
What versions of Python are vulnerable to CVE-2024-12345?
Versions prior to Python 3.10 are vulnerable to CVE-2024-12345 and require an update to mitigate the risk.
5
Is there a workaround for CVE-2024-12345 until I can upgrade?
A temporary workaround for CVE-2024-12345 is to manually configure your application to require secure TLS settings for mail communications.