cpython/Doc/whatsnew
Petr Viktorin ee953f2b8f
[3.9] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123769)
Detect email address parsing errors and return empty tuple to
indicate the parsing error (old API). Add an optional 'strict'
parameter to getaddresses() and parseaddr() functions. Patch by
Thomas Dwyer.

(cherry picked from commit 4a153a1d3b)

Co-authored-by: Victor Stinner <vstinner@python.org>
Co-Authored-By: Thomas Dwyer <github@tomd.tel>
2024-09-06 13:13:54 +02:00
..
2.0.rst [3.9] [docs] Improve the markup of powers (GH-28598) (GH-28608) 2021-09-28 23:13:16 +02:00
2.1.rst
2.2.rst
2.3.rst
2.4.rst
2.5.rst gh-87670: Add web.archive redirects from effbot (GH-92816) 2022-05-15 23:32:15 -07:00
2.6.rst
2.7.rst gh-87670: Add web.archive redirects from effbot (GH-92816) 2022-05-15 23:32:15 -07:00
3.0.rst
3.1.rst [3.9] [docs] Improve the markup of powers (GH-28598) (GH-28608) 2021-09-28 23:13:16 +02:00
3.2.rst gh-87670: Add web.archive redirects from effbot (GH-92816) 2022-05-15 23:32:15 -07:00
3.3.rst [3.9] bpo-40204: Allow pre-Sphinx 3 syntax in the doc (GH-21844) (GH-21901) 2020-08-19 19:25:22 +02:00
3.4.rst bpo-38600: NULL -> ``NULL``. (GH-17001) 2019-10-30 21:37:16 +02:00
3.5.rst [3.9] bpo-40204: Allow pre-Sphinx 3 syntax in the doc (GH-21844) (GH-21901) 2020-08-19 19:25:22 +02:00
3.6.rst [3.9] bpo-42967: only use '&' as a query string separator (GH-24297) (#24528) 2021-02-15 10:03:31 -08:00
3.7.rst bpo-31415: importtime was made by Inada Naoki (GH-31875) 2022-03-14 14:30:15 -07:00
3.8.rst gh-83728: Add hmac.new default parameter deprecation (GH-91939) (GH-93546) 2022-06-06 19:10:56 +02:00
3.9.rst [3.9] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123769) 2024-09-06 13:13:54 +02:00
changelog.rst
index.rst