Affected: Python Software Foundation CPython

The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".

security update for python3

curl: libcurl: Curl out of bounds read for cookie path gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service cpython: Excessive read buffering DoS in http.client util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory cpython: IMAP command injection in user-controlled commands cpython: POP3 command injection in user-controlled commands openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation golang: net/url: Memory exhaustion in query parameter parsing in net/url openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in…