Repository navigation
Commit fd1c681
[CVE-2026-0864] Normalize all line endings (CR, CRLF, and LF) in configparser
This normalizes all line endings (CR, CRLF, and LF) to multiline
continuation format (LF+TAB), preventing configuration injection
vulnerabilities across mixed platform environments.
Fixes: bsc#1269066 (CVE-2026-0864)
Fixes: gh#python#143927
From-PR: gh#python/cpython!143929
Patch: CVE-2026-0864-normalize-LFTAB-configparser.patch1 parent adfbd38 commit fd1c681
3 files changed
Lines changed: 16 additions & 1 deletion
File tree
- Lib
- test
- Misc/NEWS.d/next/Security
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
925 | 925 | | |
926 | 926 | | |
927 | 927 | | |
928 | | - | |
| 928 | + | |
| 929 | + | |
| 930 | + | |
929 | 931 | | |
930 | 932 | | |
931 | 933 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
520 | 520 | | |
521 | 521 | | |
522 | 522 | | |
| 523 | + | |
| 524 | + | |
| 525 | + | |
| 526 | + | |
| 527 | + | |
| 528 | + | |
| 529 | + | |
| 530 | + | |
| 531 | + | |
| 532 | + | |
| 533 | + | |
523 | 534 | | |
524 | 535 | | |
525 | 536 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
0 commit comments