Skip to content

Conversation

@frenzymadness
Copy link
Member

No description provided.

gpshead and others added 4 commits January 29, 2026 13:51
pythongh-143916: Reject control characters in wsgiref.headers.Headers  (pythonGH-143917)

* Add 'test.support' fixture for C0 control characters
* pythongh-143916: Reject control characters in wsgiref.headers.Headers

(cherry picked from commit f7fceed)
(cherry picked from commit 22e4d55)

Co-authored-by: Seth Michael Larson <seth@python.org>
pythongh-143921: Reject control characters in IMAP commands
pythongh-143923: Reject control characters in POP3 commands
pythongh-144125: email: verify headers are sound in BytesGenerator
(cherry picked from commit 052e55e)

Co-authored-by: Seth Michael Larson <seth@python.org>
Co-authored-by: Denis Ledoux <dle@odoo.com>
Co-authored-by: Denis Ledoux <5822488+beledouxdenis@users.noreply.github.com>
Co-authored-by: Petr Viktorin <302922+encukou@users.noreply.github.com>
Co-authored-by: Bas Bloemsaat <1586868+basbloemsaat@users.noreply.github.com>

The fix for the CVE uncovered a known issue in handling
policy.linesep lengths fixed by:

bpo-34424: Handle different policy.linesep lengths correctly. (python#8803)
@frenzymadness frenzymadness requested a review from hroncok January 30, 2026 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants