]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d0e8c10) | patch
[3.11] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Wed, 4 Sep 2024 15:50:00 +0000 (17:50 +0200)
committerGitHub <noreply@github.com>
Wed, 4 Sep 2024 15:50:00 +0000 (17:50 +0200)
commitd4ac921a4b081f7f996a5d2b101684b67ba0ed7f
tree6bd46083aecd0f270045f9b8c3ecfff0656f6488tree | snapshot
parentd0e8c100e439e92b1beb5a664843f8c00a88ae2acommit | diff
[3.11] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123105)

This fixes CVE-2024-7592.
(cherry picked from commit 44e458357fca05ca0ae2658d62c8c595b048b5ef)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Lib/http/cookies.py diff | blob | blame | history
Lib/test/test_http_cookies.py diff | blob | blame | history
Misc/NEWS.d/next/Library/2024-08-16-19-13-21.gh-issue-123067.Nx9O4R.rst [new file with mode: 0644] blob
Mirror of https://github.com/python/cpython.git