Skip to content

Commit

Permalink
Roll back fix for CVE-2023-40217
Browse files Browse the repository at this point in the history
The community rolled back the original fix because of problems.

This may be fixed in the future with pythongh-102988

Cherry picked b4bcc06 for SSL
  • Loading branch information
rickprice committed Sep 14, 2023
1 parent 0642365 commit 8c04991
Showing 1 changed file with 0 additions and 6 deletions.
6 changes: 0 additions & 6 deletions Doc/whatsnew/3.7.rst
Original file line number Diff line number Diff line change
Expand Up @@ -2639,12 +2639,6 @@ from the URL. This is a mitigation for `CVE-2023-24329
Notable security feature in 3.7.17.2
==================================

email.utils.getaddresses and email.utils.parseaddr now return
``('', '')`` 2-tuples in more situations where invalid email addresses are
encountered instead of potentially inaccurate values.
(Contributed by Thomas Dwyer for :gh:`102988` to ameliorate CVE-2023-27043.)


Fixed an issue where instances of :class:`ssl.SSLSocket` were vulnerable to
a bypass of the TLS handshake and included protections (like certificate
verification) and treating sent unencrypted data as if it were
Expand Down

0 comments on commit 8c04991

Please sign in to comment.