diff options
| author | Thomas Dwyer <github@tomd.tel> | 2023-07-10 23:00:55 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-07-10 23:00:55 (GMT) |
| commit | 18dfbd035775c15533d13a98e56b1d2bf5c65f00 (patch) | |
| tree | 3da9c6fff33d3c8f5cb7b503e1915a005beaf068 /Doc/whatsnew | |
| parent | 6782fc050281205734700a1c3e13b123961ed15b (diff) | |
| download | cpython-18dfbd035775c15533d13a98e56b1d2bf5c65f00.zip cpython-18dfbd035775c15533d13a98e56b1d2bf5c65f00.tar.gz cpython-18dfbd035775c15533d13a98e56b1d2bf5c65f00.tar.bz2 | |
gh-102988: Detect email address parsing errors and return empty tuple to indicate the parsing error (old API) (#105127)
Detect email address parsing errors and return empty tuple to indicate the parsing error (old API). This fixes or at least ameliorates CVE-2023-27043.
---------
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Diffstat (limited to 'Doc/whatsnew')
| -rw-r--r-- | Doc/whatsnew/3.12.rst | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/Doc/whatsnew/3.12.rst b/Doc/whatsnew/3.12.rst index a892f92..766f468 100644 --- a/Doc/whatsnew/3.12.rst +++ b/Doc/whatsnew/3.12.rst @@ -570,6 +570,14 @@ dis :data:`~dis.hasarg` collection instead. (Contributed by Irit Katriel in :gh:`94216`.) +email +----- + +* :func:`email.utils.getaddresses` and :func:`email.utils.parseaddr` now return + ``('', '')`` 2-tuples in more situations where invalid email addresses are + encountered instead of potentially inaccurate values. + (Contributed by Thomas Dwyer for :gh:`102988` to ameliorate CVE-2023-27043.) + fractions --------- |