Skip to content

[3.8] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116)#123770

Merged
ambv merged 2 commits intopython:3.8from
encukou:backport-4a153a1-3.8
Sep 6, 2024
Merged

[3.8] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116)#123770
ambv merged 2 commits intopython:3.8from
encukou:backport-4a153a1-3.8

Conversation

@encukou
Copy link
Member

@encukou encukou commented Sep 6, 2024 •
edited by bedevere-app bot
Loading

vstinner and others added 2 commits September 6, 2024 12:53
@vstinner @tdwyer @encukou
[3.8] [CVE-2023-27043] pythongh-102988: Reject malformed addresses in…
0250d40 
… email.parseaddr() (pythonGH-111116)

Detect email address parsing errors and return empty tuple to
indicate the parsing error (old API). Add an optional 'strict'
parameter to getaddresses() and parseaddr() functions. Patch by
Thomas Dwyer.

(cherry picked from commit 4a153a1)

Co-authored-by: Victor Stinner <vstinner@python.org>
Co-Authored-By: Thomas Dwyer <github@tomd.tel>
@encukou
Adjust versions in docs
35c0d4f
@encukou encukou requested a review from a team as a code owner September 6, 2024 10:56
@bedevere-app bedevere-app bot mentioned this pull request Sep 6, 2024
Merged
@bedevere-app bedevere-app bot added type-bug An unexpected behavior, bug, or error type-security A security issue labels Sep 6, 2024
@ambv ambv merged commit 4d069d5 into python:3.8 Sep 6, 2024
@encukou encukou deleted the backport-4a153a1-3.8 branch September 6, 2024 11:18
@bedevere-app bedevere-app bot mentioned this pull request Sep 6, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

type-bug An unexpected behavior, bug, or error type-security A security issue

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@encukou @ambv @vstinner