CVE-2025-15366

Published: January 22, 2026Last modified: January 28, 2026

Description

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

Status

Product	Release	Package	Status
Alpaquita Linux	23 LTS	python3	Fixed (3.11.13-r3)
	25 LTS	python3	Fixed (3.12.12-r2)
	Stream	python3	Fixed (3.12.12-r3)
Hardened Containers	23 LTS	python3	Fixed (3.11.13-r3)
	25 LTS	python3	Fixed (3.12.12-r2)
	Stream	python3	Fixed (3.12.12-r3)

References

https://github.com/python/cpython/commit/6262704b134db2a4ba12e85ecfbd968534f28b45
https://github.com/python/cpython/issues/143921
https://github.com/python/cpython/pull/143922
https://mail.python.org/archives/list/[email protected]/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/

How to Fix Liberica NIK Not Starting on macOS Catalina and Later

If you use macOS Catalina and later you may encounter the issue that prevents Liberica NIK from starting. To fix it, run the following:

sudo xattr -r -d com.apple.quarantine path/to/graalvm/folder/

If you need more help, check out the FAQ at the bottom of this page or contact us.