NotificationsYou must be signed in to change notification settings
Fork32.4k
Star67.9k

[3.8] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116)#123770

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Jump to bottom

Merged

ambv merged 2 commits intopython:3.8fromencukou:backport-4a153a1-3.8

Sep 6, 2024

Merged

[3.8] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116)#123770

ambv merged 2 commits intopython:3.8fromencukou:backport-4a153a1-3.8

Sep 6, 2024

Conversation

Copy link

Member

encukou commentedSep 6, 2024•
edited by bedevere-appbot
Loading

Issue:[CVE-2023-27043] Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple #102988

vstinnerand others added2 commits

September 6, 2024 12:53

[3.8] [CVE-2023-27043]pythongh-102988: Reject malformed addresses in…

0250d40

… email.parseaddr() (pythonGH-111116)Detect email address parsing errors and return empty tuple toindicate the parsing error (old API). Add an optional 'strict'parameter to getaddresses() and parseaddr() functions. Patch byThomas Dwyer.(cherry picked from commit4a153a1)Co-authored-by: Victor Stinner <vstinner@python.org>Co-Authored-By: Thomas Dwyer <github@tomd.tel>

Adjust versions in docs

35c0d4f