cpython/Lib
Petr Viktorin 15068242bd
[3.12] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123766)
Detect email address parsing errors and return empty tuple to
indicate the parsing error (old API). Add an optional 'strict'
parameter to getaddresses() and parseaddr() functions. Patch by
Thomas Dwyer.

Co-Authored-By: Thomas Dwyer <github@tomd.tel>
(cherry picked from commit 4a153a1d3b)

Co-authored-by: Victor Stinner <vstinner@python.org>
2024-09-06 12:46:16 +02:00
..
__phello__
asyncio [3.12] gh-112182: Replace StopIteration with RuntimeError for future (GH-113220) (GH-123033) 2024-08-15 15:34:53 +00:00
collections [3.12] gh-117387 Remove hash mark from introductory text (GH-117409) (#gh- 2024-03-31 21:24:28 +00:00
concurrent [3.12] gh-120121: Add InvalidStateError to concurrent.futures.__all__ (GH-120123) (#120274) 2024-06-08 16:28:21 +00:00
ctypes [3.12] gh-87969: Align docs and docstrings with implementation for ctypes' [w]string_at() (GH-25384) (GH-118046) 2024-04-19 13:23:26 +02:00
curses
dbm
email [3.12] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123766) 2024-09-06 12:46:16 +02:00
encodings
ensurepip [3.12] gh-122744: Bump bundled pip to 24.2 (#122747) 2024-08-06 18:50:14 +00:00
html
http [3.12] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123104) 2024-08-24 15:37:11 -07:00
idlelib [3.12] gh-121804: Backport idlelib.pyshell change (GH-121886) (#123366) 2024-08-26 19:59:14 -04:00
importlib [3.12] gh-117983: Defer import of threading for lazy module loading (GH-120233) (GH-121350) 2024-07-03 21:09:00 +00:00
json [3.12] doc: Use super() in subclassed JSONEncoder examples (GH-115565) (GH-116047) 2024-02-28 14:13:08 +00:00
lib2to3
logging [3.12] gh-121723: Relax constraints on queue objects for logging.handlers.QueueHandler. (GH-122154) (GH-122604) 2024-08-02 12:46:04 +01:00
msilib
multiprocessing [3.12] bpo-43952: Fix multiprocessing Listener authkey bug (GH-25845) (GH-115995) 2024-02-27 16:13:53 +00:00
pydoc_data Python 3.12.5 2024-08-06 21:08:49 +02:00
re [3.12] Fix syntax in generate_re_casefix.py (GH-122699) (#122722) 2024-08-06 06:42:27 +00:00
site-packages
sqlite3 [3.12] gh-118221: Always use the default row factory in sqlite3.iterdump() (#118223) (#118270) 2024-04-25 08:33:35 +00:00
test [3.12] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123766) 2024-09-06 12:46:16 +02:00
tkinter [3.12] gh-121905: Consistently use "floating-point" instead of "floating point" (GH-121907) (GH-122013) 2024-07-19 09:08:33 +00:00
tomllib
turtledemo [3.12] gh-119174: Fix high DPI causes turtledemo(turtle-graphics examples) windows blurry (GH-119175) (#119290) 2024-05-21 04:09:30 +00:00
unittest [3.12] gh-120732: Fix name passing to Mock, when using kwargs to create_autospec (GH-120737) (#120761) 2024-06-19 20:53:19 +00:00
urllib [3.12] gh-67693: Fix urlunparse() and urlunsplit() for URIs with path starting with multiple slashes and no authority (GH-113563) (GH-119024) 2024-05-14 09:47:11 +00:00
venv gh-90329: Add _winapi.GetLongPathName and GetShortPathName and use in venv to reduce warnings (GH-117817) 2024-04-15 16:43:41 +01:00
wsgiref
xml [3.12] gh-119577: Adjust DeprecationWarning when testing element truth values in Element tree (GH-119762) (#120190) 2024-08-06 17:20:06 +00:00
xmlrpc
zipfile [3.12] gh-123270: Replaced SanitizedNames with a more surgical fix. (GH-123354) (#123411) 2024-09-02 09:19:40 -04:00
zoneinfo [3.12] gh-106233: Fix stacklevel in zoneinfo.InvalidTZPathWarning (GH-106234) (GH-115081) 2024-02-06 13:26:39 +00:00
__future__.py
__hello__.py
_aix_support.py
_collections_abc.py
_compat_pickle.py
_compression.py
_markupbase.py
_osx_support.py [3.12] gh-102362: Fix macOS version number in result of sysconfig.get_platform() (GH-112942) (#113264) 2023-12-19 19:51:17 +01:00
_py_abc.py
_pydatetime.py Revert "[3.12] gh-120713: Normalize year with century for datetime.strftime (GH-120820) (GH-121145)" (GH-122409) 2024-07-29 21:55:12 +03:00
_pydecimal.py [3.12] gh-121905: Consistently use "floating-point" instead of "floating point" (GH-121907) (GH-122013) 2024-07-19 09:08:33 +00:00
_pyio.py [3.12] gh-95782: Fix io.BufferedReader.tell() etc. being able to return offsets < 0 (GH-99709) (GH-115599) 2024-02-17 14:56:00 +02:00
_pylong.py [3.12] gh-118164: Break a loop between _pydecimal and _pylong and optimize int to str conversion (GH-118483) (GH-118590) 2024-05-06 12:10:05 +03:00
_sitebuiltins.py
_strptime.py [3.12] bpo-36959: Fix error messages for invalid ISO format string in _strptime() (GH-13408) (GH-113495) 2023-12-26 21:56:42 +02:00
_threading_local.py
_weakrefset.py
abc.py
aifc.py
antigravity.py
argparse.py [3.12] gh-121018: Fix more cases of exiting in argparse when exit_on_error=False (GH-121056) (GH-121129) 2024-06-28 14:52:07 +00:00
ast.py [3.12] gh-112364: Correct unparsing of backslashes and quotes in ast.… (#115782) 2024-02-21 23:28:07 +00:00
base64.py [3.12] Clarify base64.a85encode docs: *wrapcols* doesn't count the newline (GH-119409) (GH-119482) 2024-05-28 16:55:43 +02:00
bdb.py [3.12] gh-58933: Make pdb return to caller frame correctly when f_trace is not set (GH-118979) (#119008) 2024-05-13 20:21:15 +01:00
bisect.py
bz2.py
calendar.py [3.12] gh-120567: Clarify weekday return in calendar.monthrange docstring (GH-120570) (#120598) 2024-06-16 21:03:09 +00:00
cgi.py
cgitb.py
chunk.py
cmd.py
code.py [3.12] gh-122478: Remove internal frames from tracebacks in REPL (GH-122528) (GH-122816) 2024-08-23 09:27:03 +03:00
codecs.py
codeop.py [3.12] gh-111366: Correctly show custom syntax error messages in the codeop module functions (GH-111384). (#111517) 2023-10-30 19:53:01 +00:00
colorsys.py [3.12] gh-121905: Consistently use "floating-point" instead of "floating point" (GH-121907) (GH-122013) 2024-07-19 09:08:33 +00:00
compileall.py
configparser.py [3.12] gh-116957: configparser: Do post-process values after DuplicateOptionError (GH-116958) (GH-117013) 2024-03-19 18:18:50 +01:00
contextlib.py [3.12] gh-103791: handle BaseExceptionGroup in contextlib.suppress() (GH-111910) (#111955) 2023-11-10 14:00:48 +00:00
contextvars.py
copy.py
copyreg.py
cProfile.py
crypt.py
csv.py
dataclasses.py [3.12] gh-118033: Fix __weakref__ not set for generic dataclasses (GH-118099) (#118822) 2024-05-09 09:09:40 +00:00
datetime.py
decimal.py [3.12] gh-121905: Consistently use "floating-point" instead of "floating point" (GH-121907) (GH-122013) 2024-07-19 09:08:33 +00:00
difflib.py
dis.py [3.12] gh-108826: Document dis module CLI and rename _test function to main (#108827) (#110681) 2023-10-11 14:47:38 -06:00
doctest.py [3.12] gh-117692: Fix AttributeError in DocTestFinder on wrapped builtin_or_method (GH-117699) (#117708) 2024-04-10 14:17:15 +00:00
enum.py [3.12] gh-116600: [Enum] fix global Flag repr (GH-116615) (GH-116629) 2024-03-11 17:36:00 -07:00
filecmp.py [3.12] gh-122400: Handle ValueError in filecmp (GH-122401) (GH-122442) 2024-07-30 09:07:06 +00:00
fileinput.py
fnmatch.py
fractions.py [3.12] gh-119189: Fix the power operator for Fraction (GH-119242) (GH-119835) 2024-07-16 10:44:05 +03:00
ftplib.py [3.12] gh-114241: Fix and improve the ftplib CLI (GH-114242) (GH-114404) 2024-01-21 20:48:12 +00:00
functools.py [3.12] gh-121025: Improve partialmethod.__repr__ (GH-121033) (GH-121038) 2024-06-26 09:29:59 +00:00
genericpath.py
getopt.py
getpass.py
gettext.py [3.12] gh-110519: Improve deprecation warning in the gettext module (GH-110520) (GH-110563) 2023-10-09 16:27:01 +02:00
glob.py [3.12] gh-79382: Fix recursive glob() with trailing "**" (GH-115134) (GH-115290) 2024-02-11 10:57:40 +00:00
graphlib.py
gzip.py
hashlib.py
heapq.py
hmac.py [3.12] gh-112999: Replace the outdated "deprecated" directives with "versionchanged" (GH-113000) (GH-113019) 2023-12-12 17:20:51 +00:00
imaplib.py
imghdr.py
inspect.py [3.12] gh-114053: Fix bad interaction of PEP 695, PEP 563 and inspect.get_annotations (GH-120270) (#120475) 2024-06-13 21:35:21 +00:00
io.py gh-111356: io: Add missing documented objects to io.__all__ (GH-111370) 2023-11-10 07:37:19 +00:00
ipaddress.py [3.12] gh-120128: fix description of argument to ipaddress.collapse_addresses() (GH-120131) (#120136) 2024-06-15 06:12:45 -06:00
keyword.py
linecache.py [3.12] gh-122170: Handle ValueError raised by os.stat() in linecache (GH-122176) (GH-122349) 2024-07-27 10:48:14 +00:00
locale.py [3.12] gh-91565: Replace bugs.python.org links with Devguide/GitHub ones (GH-91568) (GH-117890) 2024-04-15 12:59:34 +00:00
lzma.py
mailbox.py [3.12] gh-117467: Add preserving of mailbox owner on flush (GH-117510) (GH-117537) 2024-04-04 10:55:42 +00:00
mailcap.py
mimetypes.py [3.12] gh-83505: Add markdown mimetype mapping (GH-17995) (#118594) 2024-08-06 10:05:18 -04:00
modulefinder.py
netrc.py
nntplib.py
ntpath.py gh-118263: Add additional arguments to path_t (Argument Clinic type) in posixmodule (GH-119608) 2024-05-28 11:13:01 +01:00
nturl2path.py
numbers.py
opcode.py
operator.py
optparse.py
os.py [3.12] GH-89727: Fix FD leak on os.fwalk() generator finalization. (GH-119766) (#119768) 2024-05-30 05:30:37 +01:00
pathlib.py [3.12] docs: typo: tiny grammar change: "pointed by" -> "pointed to by" (GH-118411) (#118504) 2024-05-02 06:01:06 +00:00
pdb.py [3.12] gh-119824: Revert the where solution and use meta commands (#120928) 2024-06-23 14:58:10 -07:00
pickle.py [3.12] gh-122311: Fix some error messages in pickle (GH-122386) (GH-122388) 2024-07-29 12:27:34 +03:00
pickletools.py [3.12] gh-115146: Fix typo in pickletools.py documentation (GH-115148) (GH-115155) 2024-02-08 08:30:31 +00:00
pipes.py
pkgutil.py
platform.py [3.12] gh-91565: Replace bugs.python.org links with Devguide/GitHub ones (GH-91568) (GH-117890) 2024-04-15 12:59:34 +00:00
plistlib.py
poplib.py
posixpath.py gh-118263: Add additional arguments to path_t (Argument Clinic type) in posixmodule (GH-119608) 2024-05-28 11:13:01 +01:00
pprint.py [3.12] [pprint]: Add docstring about PrettyPrinter.underscore_numbers parameter (GH-112963) (#113053) 2023-12-13 12:38:07 +00:00
profile.py
pstats.py [3.12] gh-121905: Consistently use "floating-point" instead of "floating point" (GH-121907) (GH-122013) 2024-07-19 09:08:33 +00:00
pty.py
py_compile.py
pyclbr.py
pydoc.py [3.12] bpo-37755: Use configured output in pydoc instead of pager (GH-15105) (GH-120262) 2024-06-08 09:46:25 +00:00
queue.py
quopri.py
random.py [3.12] gh-109653: Reduce the import time of random by 60% (GH-110221) (#110247) 2023-10-02 23:31:55 +00:00
reprlib.py [3.12] gh-109818: reprlib.recursive_repr copies __type_params__ (… (#109999) 2023-10-02 17:41:26 +02:00
rlcompleter.py
runpy.py [3.12] gh-99437: runpy: decode path-like objects before setting globals (#114838) 2024-08-12 11:22:13 +03:00
sched.py [3.12] gh-121905: Consistently use "floating-point" instead of "floating point" (GH-121907) (GH-122013) 2024-07-19 09:08:33 +00:00
secrets.py
selectors.py [3.12] gh-110038: KqueueSelector must count all read/write events (GH-110039) (#110043) 2023-10-02 17:42:55 +02:00
shelve.py
shlex.py
shutil.py [3.12] GH-89727: Fix shutil.rmtree() recursion error on deep trees (GH-119808) (#119919) 2024-06-01 20:39:35 +01:00
signal.py [3.12] gh-112559: Avoid unnecessary conversion attempts to enum_klass in signal.py (GH-113040) (#113443) 2023-12-23 18:09:59 -08:00
site.py [3.12] GH-119496: accept UTF-8 BOM in .pth files (GH-119509) 2024-05-24 14:52:09 +00:00
smtplib.py
sndhdr.py
socket.py [3.12] gh-122133: Rework pure Python socketpair tests to avoid use of importlib.reload. (GH-122493) (GH-122505) 2024-07-31 09:23:10 -07:00
socketserver.py
sre_compile.py
sre_constants.py
sre_parse.py
ssl.py [3.12] gh-79846: Make ssl.create_default_context() ignore invalid certificates (GH-91740) (#122769) 2024-08-09 12:55:36 -04:00
stat.py
statistics.py [3.12] gh-121905: Consistently use "floating-point" instead of "floating point" (GH-121907) (GH-122013) 2024-07-19 09:08:33 +00:00
string.py
stringprep.py
struct.py
subprocess.py [3.12] gh-90872: Fix subprocess.Popen.wait() for negative timeout (#116989) (#117002) 2024-03-19 14:15:05 +00:00
sunau.py
symtable.py [3.12] gh-119698: fix a special case in symtable.Class.get_methods (GH-121802) (#121910) 2024-07-17 22:32:29 +00:00
sysconfig.py
tabnanny.py [3.12] gh-120495: Fix incorrect exception handling in Tab Nanny (GH-120498) (#120549) 2024-06-15 11:21:05 +00:00
tarfile.py [3.12] gh-121285: Remove backtracking when parsing tarfile headers (GH-121286) (GH-123543) 2024-08-31 22:35:24 +00:00
telnetlib.py [3.12] gh-118042: Fix error in Telnet.__del__ when __init__() was not called (GH-118274) 2024-04-26 08:53:54 +03:00
tempfile.py [3.12] gh-79325: Fix recursion error in TemporaryDirectory cleanup on Windows (GH-112762) (GH-112847) 2023-12-07 17:36:29 +00:00
textwrap.py
this.py
threading.py [3.12] gh-121474: Add threading.Barrier parties arg sanity check. (GH-121480) (GH-122443) 2024-07-30 09:12:11 +00:00
timeit.py
token.py
tokenize.py [3.12] gh-115154: Fix untokenize handling of unicode named literals (GH-115171) (#115662) 2024-02-19 16:38:43 +00:00
trace.py [3.12] gh-103956: Fix trace output in case of missing source line (GH-103958) (GH-118832) 2024-05-09 12:51:03 +00:00
traceback.py [3.12] gh-113358: Fix rendering tracebacks with exceptions with a broken __getattr__ (GH-113359) (#114173) 2024-01-21 17:12:17 +00:00
tracemalloc.py
tty.py [3.12] gh-114328: tty cbreak mode should not alter ICRNL (GH-114335) (#114410) 2024-01-21 23:41:03 +00:00
turtle.py [3.12] Fix print usage in turtle doctests (GH-122940) (#122978) 2024-08-13 16:58:37 +00:00
types.py
typing.py [3.12] gh-114053: Fix another edge case involving get_type_hints, PEP 695 and PEP 563 (GH-120272) (#121004) 2024-06-25 16:31:01 +00:00
uu.py
uuid.py
warnings.py [3.12] gh-117535: Ignore made up file name "sys" for warnings (#118014) 2024-04-19 04:07:05 +00:00
wave.py
weakref.py
webbrowser.py [3.12] gh-123494: Improve documentation for `webbrowser` return types (GH-123495) (#123549) 2024-09-01 05:36:18 +00:00
xdrlib.py
zipapp.py
zipimport.py