ELA-1410-1 python3.7 security update

mishandling of email headers

2025-04-27
Packagepython3.7
Version3.7.3-2+deb10u10 (buster)
Related CVEs CVE-2025-1795


List separators in email headers were wrongly Unicode-encoded in email headers in the Python3 interpreter.



For Debian 10 buster, these problems have been fixed in version 3.7.3-2+deb10u10.

We recommend that you upgrade your python3.7 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.