diff options
| author |   Petr Viktorin <encukou@gmail.com> | 2024-09-06 13:14:09 +0200 |
|---|---|---|
| committer |   GitHub <noreply@github.com> | 2024-09-06 13:14:09 +0200 |
| commit | 4d069d5b1170b9d82013ab824ff5d6cf28964d97 (patch) | |
| tree | 33c9d117a483d828686cde24323ce83c55721f4b /Misc/NEWS.d/next/Security/2024-03-27-13-50-02.gh-issue-116741.ZoGryG.rst | |
| parent | [3.8] gh-123678: Upgrade libexpat 2.6.3 (#123712) (diff) | |
| download | cpython-4d069d5b1170b9d82013ab824ff5d6cf28964d97.tar.gz cpython-4d069d5b1170b9d82013ab824ff5d6cf28964d97.tar.bz2 cpython-4d069d5b1170b9d82013ab824ff5d6cf28964d97.zip | |
[3.8] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123770)
Detect email address parsing errors and return empty tuple to
indicate the parsing error (old API). Add an optional 'strict'
parameter to getaddresses() and parseaddr() functions. Patch by
Thomas Dwyer.
(cherry picked from commit 4a153a1d3b18803a684cd1bcc2cdf3ede3dbae19)
Co-authored-by: Victor Stinner <vstinner@python.org>
Co-Authored-By: Thomas Dwyer <github@tomd.tel>
Diffstat (limited to 'Misc/NEWS.d/next/Security/2024-03-27-13-50-02.gh-issue-116741.ZoGryG.rst')
0 files changed, 0 insertions, 0 deletions