]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.13] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sat, 24 Aug 2024 22:36:58 +0000 (00:36 +0200)
committerGitHub <noreply@github.com>
Sat, 24 Aug 2024 22:36:58 +0000 (15:36 -0700)
commit391e5626e3ee5af267b97e37abc7475732e67621
treec3e7686044b3fe0e70a089e2660c6d78dcdbb83e
parent5709cee0b67ed65ee9655096c853943dcf292099
[3.13] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123103)

gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075)

This fixes CVE-2024-7592.
(cherry picked from commit 44e458357fca05ca0ae2658d62c8c595b048b5ef)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Lib/http/cookies.py
Lib/test/test_http_cookies.py
Misc/NEWS.d/next/Library/2024-08-16-19-13-21.gh-issue-123067.Nx9O4R.rst [new file with mode: 0644]