Skip to content

gh-102988: Detect email address parsing errors and return empty tuple to indicate the parsing error (old API) #105127

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gpshead merged 9 commits into from
Jul 10, 2023
Merged

gh-102988: Detect email address parsing errors and return empty tuple to indicate the parsing error (old API) #105127

Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
81098ed
gh-102988: Detect email address parsing errors and return empty tuple…
tdwyer May 31, 2023
ecbb31c
r-prefix strs with \ in the tests
gpshead May 31, 2023
d8d2831
reword getaddresses docstring
gpshead May 31, 2023
b44a0b7
Update comment for getaddresses() and fix broken email test
tdwyer Jun 7, 2023
40002d9
Add NEWS
tdwyer Jun 14, 2023
86ffb57
Merge branch 'main' into fix_issues102988
gpshead Jun 21, 2023
302ee76
Fix NEWS entry. It was not a Module its Class email._parseaddr.Addres…
tdwyer Jun 21, 2023
48d9f58
Add email.utils docs, narrow the docstring.
gpshead Jul 10, 2023
f96a3ff
Add versionchanged to parseaddr, add What's New.
gpshead Jul 10, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Fix NEWS entry. It was not a Module its Class email._parseaddr.Addres… 
…sList
  • Loading branch information
@tdwyer
tdwyer committed Jun 21, 2023
commit 302ee76de4468b4b4c5372ec0590365b01c7eba1
2 changes: 1 addition & 1 deletion Misc/NEWS.d/next/Security/2023-06-13-20-52-24.gh-issue-102988.Kei7Vf.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
CVE-2023-27043: Prevent :func:`email.utils.parseaddr`
and :func:`email.utils.getaddresses` from returning the realname portion of an
invalid RFC2822 email header in the email address portion of the 2-tuple
returned after being parsed by :mod:`email._parseaddr`.
returned after being parsed by :class:`email._parseaddr.AddressList`.