9 Star 2 Fork 82

src-openEuler/python3

 / 详情

CVE-2025-1795

待办的
CVE和安全问题 拥有者
创建于  
2025-03-04 10:19

一、漏洞信息
漏洞编号:CVE-2025-1795
漏洞归属组件:python3
漏洞归属的版本:3.10.2,3.10.9,3.11.11,3.11.4,3.11.6,3.7.9,3.8.5,3.9.9
CVSS V3.0分值:
BaseScore:N/A None
Vector:CVSS:3.0/
漏洞简述:
During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.
漏洞公开时间:2025-03-01 03:15:36
漏洞创建时间:2025-03-04 10:19:38
漏洞详情参考链接:
https://nvd.nist.gov/vuln/detail/CVE-2025-1795

更多参考(点击展开)
参考来源 参考链接 来源链接
cna.python.org https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48
cna.python.org https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593
cna.python.org https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74
cna.python.org https://github.com/python/cpython/issues/100884
cna.python.org https://github.com/python/cpython/pull/100885
cna.python.org https://github.com/python/cpython/pull/119099
cna.python.org https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/
suse_bugzilla http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-1795 https://bugzilla.suse.com/show_bug.cgi?id=1238450
suse_bugzilla https://www.cve.org/CVERecord?id=CVE-2025-1795 https://bugzilla.suse.com/show_bug.cgi?id=1238450
suse_bugzilla https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48 https://bugzilla.suse.com/show_bug.cgi?id=1238450
suse_bugzilla https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593 https://bugzilla.suse.com/show_bug.cgi?id=1238450
suse_bugzilla https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74 https://bugzilla.suse.com/show_bug.cgi?id=1238450
suse_bugzilla https://github.com/python/cpython/issues/100884 https://bugzilla.suse.com/show_bug.cgi?id=1238450
suse_bugzilla https://github.com/python/cpython/pull/100885 https://bugzilla.suse.com/show_bug.cgi?id=1238450
suse_bugzilla https://github.com/python/cpython/pull/119099 https://bugzilla.suse.com/show_bug.cgi?id=1238450
suse_bugzilla https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/ https://bugzilla.suse.com/show_bug.cgi?id=1238450
suse_bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=2349061 https://bugzilla.suse.com/show_bug.cgi?id=1238450
osv https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48 https://osv.dev/vulnerability/CVE-2025-1795
osv https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593 https://osv.dev/vulnerability/CVE-2025-1795
osv https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74 https://osv.dev/vulnerability/CVE-2025-1795
osv https://github.com/python/cpython/issues/100884 https://osv.dev/vulnerability/CVE-2025-1795
osv https://github.com/python/cpython/pull/100885 https://osv.dev/vulnerability/CVE-2025-1795
osv https://github.com/python/cpython/pull/119099 https://osv.dev/vulnerability/CVE-2025-1795
osv https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/ https://osv.dev/vulnerability/CVE-2025-1795
osv https://security-tracker.debian.org/tracker/CVE-2025-1795 https://osv.dev/vulnerability/CVE-2025-1795
amazon_linux_explore https://access.redhat.com/security/cve/CVE-2025-1795 https://explore.alas.aws.amazon.com/CVE-2025-1795.html
amazon_linux_explore https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1795 https://explore.alas.aws.amazon.com/CVE-2025-1795.html

漏洞分析指导链接:
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息:

详情(点击展开)
影响的包 修复版本 修复补丁 问题引入补丁 来源
https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48 cna.python.org
https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593 cna.python.org
https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74 cna.python.org
https://github.com/python/cpython/pull/100885 cna.python.org
https://github.com/python/cpython/pull/119099 cna.python.org
https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48 suse_bugzilla
https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593 suse_bugzilla
https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74 suse_bugzilla
https://github.com/python/cpython/pull/100885 suse_bugzilla
https://github.com/python/cpython/pull/119099 suse_bugzilla
https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48 osv
https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593 osv
https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74 osv
https://github.com/python/cpython/pull/100885 osv
https://github.com/python/cpython/pull/119099 osv

二、漏洞分析结构反馈
影响性分析说明:

openEuler评分:

受影响版本排查(受影响/不受影响):
1.master(3.11.11):
2.openEuler-20.03-LTS-SP4(3.7.9):
3.openEuler-22.03-LTS-SP3(3.9.9):
4.openEuler-22.03-LTS-SP4(3.9.9):
5.openEuler-24.03-LTS(3.11.6):
6.openEuler-24.03-LTS-Next(3.11.6):
7.openEuler-24.03-LTS-SP1(3.11.6):

修复是否涉及abi变化(是/否):
1.master(3.11.11):
2.openEuler-20.03-LTS-SP4(3.7.9):
3.openEuler-22.03-LTS-SP3(3.9.9):
4.openEuler-22.03-LTS-SP4(3.9.9):
5.openEuler-24.03-LTS(3.11.6):
6.openEuler-24.03-LTS-Next(3.11.6):
7.openEuler-24.03-LTS-SP1(3.11.6):

原因说明:
1.master(3.11.11):
2.openEuler-20.03-LTS-SP4(3.7.9):
3.openEuler-22.03-LTS-SP3(3.9.9):
4.openEuler-22.03-LTS-SP4(3.9.9):
5.openEuler-24.03-LTS(3.11.6):
6.openEuler-24.03-LTS-Next(3.11.6):
7.openEuler-24.03-LTS-SP1(3.11.6):

评论 (4)

openeuler-ci-bot 创建了CVE和安全问题 2个月前
openeuler-ci-bot 添加了
 
CVE/UNFIXED
标签
2个月前
展开全部操作日志
openeuler-ci-bot 添加了
 
sig/Base-service
标签
2个月前
参考网址 关联pr 状态 补丁链接
https://nvd.nist.gov/vuln/detail/CVE-2025-1795NoneNonehttps://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593
https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74
https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48
https://ubuntu.com/security/CVE-2025-1795NoneNonehttps://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593
https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74
https://discourse.ubuntu.com/c/project
https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48
https://www.opencve.io/cve/CVE-2025-1795NoneNonehttps://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593
https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74
https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2025-1795
https://security-tracker.debian.org/tracker/CVE-2025-1795NoneNonehttps://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74
https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593
https://github.com/python/cpython/commit/0b6f6c82b51b7071d88f48abb3192bf3dc2a2d24
https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48
http://www.cnnvd.org.cn/web/vulnerability/queryLds.tag?qcvCnnvdid=CVE-2025-1795

说明:补丁链接仅供初步排查参考,实际可用性请人工再次确认,补丁下载验证可使用CVE补丁工具
若补丁不准确,烦请在此issue下评论 '/report-patch 参考网址 补丁链接1,补丁链接2' 反馈正确信息,便于我们不断优化工具,不胜感激。
如 /report-patch https://security-tracker.debian.org/tracker/CVE-2021-3997 https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1

openeuler-ci-bot 修改了描述 2个月前

3.11分支已合入,3.9分支社区尚未合入。
https://github.com/python/cpython/issues/100884
输入图片说明

openeuler-ci-bot 修改了描述 1个月前

登录 后才可以发表评论

状态
负责人
项目
Pull Requests
关联的 Pull Requests 被合并后可能会关闭此 issue
预计工期 (小时)
开始日期   -   截止日期
-
置顶选项
优先级
里程碑
分支
参与者(2)
5329419 openeuler ci bot 1632792936 xinsheng3-xinsheng3
1
https://gitee.com/src-openeuler/python3.git
git@gitee.com:src-openeuler/python3.git
src-openeuler
python3
python3

搜索帮助