Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux Python 3 may mishandle email address parsing
published 2 years ago
Summary
The Python 3 packages supplied by AlmaLinux have a flaw in the code that separates email addresses. This can cause the software to treat parts of an address incorrectly, which may affect mail‑related functions or data handling. Install the latest Python 3 updates from AlmaLinux as soon as possible to fix the problem.
What to do
- Update almalinux platform-python to version 3.6.8-56.el8_9.3.alma.1.
- Update almalinux platform-python-debug to version 3.6.8-56.el8_9.3.alma.1.
- Update almalinux platform-python-devel to version 3.6.8-56.el8_9.3.alma.1.
- Update almalinux python3-idle to version 3.6.8-56.el8_9.3.alma.1.
- Update almalinux python3-libs to version 3.6.8-56.el8_9.3.alma.1.
- Update almalinux python3-test to version 3.6.8-56.el8_9.3.alma.1.
- Update almalinux python3-tkinter to version 3.6.8-56.el8_9.3.alma.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | platform-python |
< 3.6.8-56.el8_9.3.alma.1 Fix: upgrade to 3.6.8-56.el8_9.3.alma.1
|
| AlmaLinux:8 | almalinux | platform-python-debug |
< 3.6.8-56.el8_9.3.alma.1 Fix: upgrade to 3.6.8-56.el8_9.3.alma.1
|
| AlmaLinux:8 | almalinux | platform-python-devel |
< 3.6.8-56.el8_9.3.alma.1 Fix: upgrade to 3.6.8-56.el8_9.3.alma.1
|
| AlmaLinux:8 | almalinux | python3-idle |
< 3.6.8-56.el8_9.3.alma.1 Fix: upgrade to 3.6.8-56.el8_9.3.alma.1
|
| AlmaLinux:8 | almalinux | python3-libs |
< 3.6.8-56.el8_9.3.alma.1 Fix: upgrade to 3.6.8-56.el8_9.3.alma.1
|
| AlmaLinux:8 | almalinux | python3-test |
< 3.6.8-56.el8_9.3.alma.1 Fix: upgrade to 3.6.8-56.el8_9.3.alma.1
|
| AlmaLinux:8 | almalinux | python3-tkinter |
< 3.6.8-56.el8_9.3.alma.1 Fix: upgrade to 3.6.8-56.el8_9.3.alma.1
|
Original advisory text
Moderate: python3 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2024:0256 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-27043 Third Party Advisory
- https://bugzilla.redhat.com/2196183 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2024-0256.html Vendor Advisory
Timeline
Published15 Jan 2024
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2024:0256 · OSV
Track software like this
Free during beta