From 8f0b2e12cc43edc2737debf8760ee7f76cdd5a67 Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Fri, 6 Sep 2024 11:43:30 +0200 Subject: [PATCH] [3.12] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) Detect email address parsing errors and return empty tuple to indicate the parsing error (old API). Add an optional 'strict' parameter to getaddresses() and parseaddr() functions. Patch by Thomas Dwyer. (cherry picked from commit 4a153a1d3b18803a684cd1bcc2cdf3ede3dbae19) Co-authored-by: Victor Stinner Co-Authored-By: Thomas Dwyer