Skip to content

CVE-2025-15366 on CTRL-OS 26.05

Aliases: CVE-2025-15366

Packages: python315

Status: Plausible, Resolved

Advisory Information

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

Updates

2026-07-23 16:57 CEST

Metadata changes:

  • Status for package python315: “Resolved” (597ad40f1206472be8823406acdf51bf24cb2899)

2026-07-23 16:56 CEST

Metadata changes:

  • Status for package python311: “Plausible”
  • Status for package python312: “Plausible”
  • Status for package python313: “Plausible”
  • Status for package python314: “Plausible”
  • Status for package python315: “Plausible”

(Amended on: 2026-07-23 16:57 CEST)

2026-06-01 17:44 CEST

Metadata changes:

  • Status for package python311: “New”
  • Status for package python312: “New”
  • Status for package python313: “New”
  • Status for package python314: “New”
  • Status for package python315: “New”