]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-16039: CVE-2013-1752: Limit imaplib.IMAP4_SSL.readline() (GH-11120)
authorVictor Stinner <vstinner@redhat.com>
Wed, 12 Dec 2018 11:05:59 +0000 (12:05 +0100)
committerGitHub <noreply@github.com>
Wed, 12 Dec 2018 11:05:59 +0000 (12:05 +0100)
commit16d63202af35dadd652a5e3eae687ea709e95b11
treeba5751e2c575a0709e8d010d3d881abdf5a98291
parentd336b1c8a40d14054145393fafb54b782cc1a549
bpo-16039: CVE-2013-1752: Limit imaplib.IMAP4_SSL.readline() (GH-11120)

* bpo-16039: CVE-2013-1752: Change use of readline() in
  imaplib.IMAP4_SSL to limit line length. Remove IMAP4_SSL.readline()
  and IMAP4_SSL.read() to inherit safe IMAP4 implementation.
* bpo-20118: reenable test_linetoolong() of test_imaplib
  on ThreadedNetworkedTests and ThreadedNetworkedTestsSSL.
  The test now sets the _MAXLINE limit to 10 characters.
Lib/imaplib.py
Lib/test/test_imaplib.py
Misc/NEWS.d/next/Security/2018-12-11-16-00-57.bpo-16039.PCj2n4.rst [new file with mode: 0644]