Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Debian 8: DLA-1925-1 Moderate Python2.7 Email Parsing Vulnerability Fix

debian lts
Calendar Grey September 16, 2019
Dist Debian Esm H88
A patch is vital for improving Python 2.7's email module by fixing a parsing error that permits invalid email addresses, enhancing validation and reliability
A vulnerability was discovered in Python, an interactive high-level object-oriented language

Summary

CVE-2019-16056

The email module wrongly parses email addresses that contain
multiple @ characters. An application that uses the email module and
implements some kind of checks on the From/To headers of a message
could be tricked into accepting an email address that should be
denied.

For Debian 8 "Jessie", this problem has been fixed in version
2.7.9-2+deb8u5.

We recommend that you upgrade your python2.7 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


<pre><font face="Courier">Package: python2.7
Version: 2.7.9-2+deb8u5
CVE ID: CVE-2019-16056

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here