[3.12] gh-102988: Detect email address parsing errors and return empty tuple to indicate the parsing error (old API) (GH-105127) by miss-islington · Pull Request #106612 · python/cpython

miss-islington

Merged

gpshead

merged 1 commit into

python:3.12from

miss-islington:backport-18dfbd0-3.12

Jul 10, 2023

Merged

[3.12] gh-102988: Detect email address parsing errors and return empty tuple to indicate the parsing error (old API) (GH-105127)#106612
gpshead
merged 1 commit into
python:3.12from
miss-islington:backport-18dfbd0-3.12

Conversation

miss-islington commented
Jul 10, 2023
•

edited by github-actions Bot

Loading

Copy link

Copy Markdown

Contributor

Detect email address parsing errors and return empty tuple to indicate the parsing error (old API). This fixes or at least ameliorates CVE-2023-27043.

(cherry picked from commit 18dfbd0)

Co-authored-by: Thomas Dwyer github@tomd.tel
Co-authored-by: Gregory P. Smith greg@krypto.org

Issue: [CVE-2023-27043] Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple #102988

📚 Documentation preview 📚: https://cpython-previews--106612.org.readthedocs.build/

pythongh-102988: Detect email address parsing errors and return empty…

e533e43

… tuple to indicate the parsing error (old API) (pythonGH-105127)

Detect email address parsing errors and return empty tuple to indicate the parsing error (old API). This fixes or at least ameliorates CVE-2023-27043.

---------

(cherry picked from commit 18dfbd0)

Co-authored-by: Thomas Dwyer <github@tomd.tel>
Co-authored-by: Gregory P. Smith <greg@krypto.org>

miss-islington requested a review from a team as a code owner