Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[3.10] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) #123768

Merged
merged 2 commits into from
Sep 6, 2024
Merged

[3.10] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) #123768

merged 2 commits into from
Sep 6, 2024

Commits on Sep 6, 2024

  1. [3.10] [CVE-2023-27043] pythongh-102988: Reject malformed addresses i… 

    …n email.parseaddr() (pythonGH-111116)

Detect email address parsing errors and return empty tuple to
indicate the parsing error (old API). Add an optional 'strict'
parameter to getaddresses() and parseaddr() functions. Patch by
Thomas Dwyer.

(cherry picked from commit 4a153a1)

Co-authored-by: Victor Stinner <[email protected]>
Co-Authored-By: Thomas Dwyer <[email protected]>
    @vstinner @tdwyer @encukou
    2 people authored and encukou committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    734cb2f View commit details
    Browse the repository at this point in the history

  2. Adjust versions in docs

    @encukou
    encukou committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    a4001ea View commit details
    Browse the repository at this point in the history