NotificationsYou must be signed in to change notification settings
Fork32.4k
Star67.9k

[3.12] gh-102988: Detect email address parsing errors and return empty tuple to indicate the parsing error (old API) (GH-105127)#106612

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Jump to bottom

Merged

gpshead merged 1 commit intopython:3.12frommiss-islington:backport-18dfbd0-3.12

Jul 10, 2023

Merged

[3.12] gh-102988: Detect email address parsing errors and return empty tuple to indicate the parsing error (old API) (GH-105127)#106612

gpshead merged 1 commit intopython:3.12frommiss-islington:backport-18dfbd0-3.12

Jul 10, 2023

Conversation

Copy link

Contributor

miss-islington commentedJul 10, 2023•
edited by github-actionsbot
Loading

Detect email address parsing errors and return empty tuple to indicate the parsing error (old API). This fixes or at least amelioratesCVE-2023-27043.

(cherry picked from commit18dfbd0)

Co-authored-by: Thomas Dwyergithub@tomd.tel
Co-authored-by: Gregory P. Smithgreg@krypto.org

Issue:[CVE-2023-27043] Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple #102988

📚 Documentation preview 📚:https://cpython-previews--106612.org.readthedocs.build/

pythongh-102988: Detect email address parsing errors and return empty…

e533e43

… tuple to indicate the parsing error (old API) (pythonGH-105127)Detect email address parsing errors and return empty tuple to indicate the parsing error (old API). This fixes or at least amelioratesCVE-2023-27043.---------(cherry picked from commit18dfbd0)Co-authored-by: Thomas Dwyer <github@tomd.tel>Co-authored-by: Gregory P. Smith <greg@krypto.org>