]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (#111116)
authorVictor Stinner <vstinner@python.org>
Fri, 15 Dec 2023 15:10:40 +0000 (16:10 +0100)
committerGitHub <noreply@github.com>
Fri, 15 Dec 2023 15:10:40 +0000 (16:10 +0100)
commit4a153a1d3b18803a684cd1bcc2cdf3ede3dbae19
tree26ca5ee7e498371cf1e3ec0147de641ddc7463ef
parent4026ad5b2c595b855a3605420cfa0e3d49e63db7
[CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (#111116)

Detect email address parsing errors and return empty tuple to
indicate the parsing error (old API). Add an optional 'strict'
parameter to getaddresses() and parseaddr() functions. Patch by
Thomas Dwyer.

Co-Authored-By: Thomas Dwyer <github@tomd.tel>
Doc/library/email.utils.rst
Doc/whatsnew/3.13.rst
Lib/email/utils.py
Lib/test/test_email/test_email.py
Misc/NEWS.d/next/Library/2023-10-20-15-28-08.gh-issue-102988.dStNO7.rst [new file with mode: 0644]