Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[3.11] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) #123767

Merged
merged 1 commit into from
Sep 6, 2024
Merged

[3.11] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) #123767

merged 1 commit into from
Sep 6, 2024

Commits on Sep 6, 2024

  1. [3.11] [CVE-2023-27043] pythongh-102988: Reject malformed addresses i… 

    …n email.parseaddr() (pythonGH-111116)

Detect email address parsing errors and return empty tuple to
indicate the parsing error (old API). Add an optional 'strict'
parameter to getaddresses() and parseaddr() functions. Patch by
Thomas Dwyer.

(cherry picked from commit 4a153a1)

Co-authored-by: Victor Stinner <vstinner@python.org>
Co-Authored-By: Thomas Dwyer <github@tomd.tel>
    @vstinner @tdwyer @encukou
    2 people authored and encukou committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    067fc2e View commit details
    Browse the repository at this point in the history