Skip to content

[CVE-2019-16056] email.utils.parseaddr mistakenly parse an email #78336

@cnicodeme

Description

@cnicodeme
mannequin
BPO 34155
Nosy @warsaw, @vstinner, @msapiro, @larryhastings, @ned-deily, @mcepl, @bitdancer, @ambv, @nicoe, @maxking, @ksze, @miss-islington, @Windsooon, @tirkarthi, @cnicodeme, @jpic, @ret2libc, @aeros, @rcsanchez97
PRs
  • bpo-34155: Dont parse domains containing @ #13079
  • [3.8] bpo-34155: Dont parse domains containing @ (GH-13079) #14824
  • [3.7] bpo-34155: Dont parse domains containing @ (GH-13079) #14825
  • [3.6] bpo-34155: Dont parse domains containing @ (GH-13079) #14826
  • [3.5] bpo-34155: Dont parse domains containing @ (GH-13079) #15317
  • [2.7] bpo-34155: Dont parse domains containing @ (GH-13079) #16006
  • Files
  • Screen Shot 2019-05-02 at 22.07.27.png
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = <Date 2019-09-14.17:43:40.610>
    created_at = <Date 2018-07-19.14:53:43.774>
    labels = ['type-security', '3.7', '3.8', 'expert-email', '3.9']
    title = '[CVE-2019-16056] email.utils.parseaddr mistakenly parse an email'
    updated_at = <Date 2019-09-14.17:43:40.609>
    user = 'https://github.com/cnicodeme'

    bugs.python.org fields:

    activity = <Date 2019-09-14.17:43:40.609>
    actor = 'maxking'
    assignee = 'none'
    closed = True
    closed_date = <Date 2019-09-14.17:43:40.610>
    closer = 'maxking'
    components = ['email']
    creation = <Date 2018-07-19.14:53:43.774>
    creator = 'cnicodeme'
    dependencies = []
    files = ['48295']
    hgrepos = []
    issue_num = 34155
    keywords = ['patch', 'security_issue']
    message_count = 52.0
    messages = ['321956', '321957', '321958', '321959', '321967', '329372', '329376', '329377', '329379', '329380', '329382', '329463', '340534', '340535', '340933', '341069', '341294', '341320', '341322', '341362', '341367', '341370', '341381', '344030', '344157', '344205', '344389', '344431', '344432', '347157', '347183', '347223', '348082', '349278', '349279', '349292', '349357', '349464', '349465', '349820', '349891', '349892', '349957', '349968', '350291', '351281', '351283', '351364', '351377', '352230', '352444', '352445']
    nosy_count = 22.0
    nosy_names = ['barry', 'vstinner', 'msapiro', 'larry', 'ned.deily', 'mcepl', 'r.david.murray', 'lukasz.langa', 'nicoe', 'maxking', 'kal.sze', 'miss-islington', 'Windson Yang', 'xtreak', 'cnicodeme', 'bortzmeyer', 'jpic', 'Dain Dwarf', 'rschiron', 'aeros', 'Anselmo Melo', 'rcsanchez97']
    pr_nums = ['13079', '14824', '14825', '14826', '15317', '16006']
    priority = 'critical'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue34155'
    versions = ['Python 2.7', 'Python 3.5', 'Python 3.6', 'Python 3.7', 'Python 3.8', 'Python 3.9']

    Metadata

    Metadata

    Assignees

    No one assigned

      Projects

      No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions