rpms/python-idna
7
0
Fork 0
Code Issues Pull Requests Releases Activity

0 Releases 32 Tags

RSS Feed
  • imports/c10s/python-idna-3.7-6.el10 2005a8a7b5
    Compare

    Fix CVE-2026-45409: quadratic time complexity in IDNA validation

    Ghost released this 2026-08-10 08:46:24 +00:00 | -54 commits to c8-stream-3.8 since this release

    Backport two upstream commits (c0dda45, e1cb465) fixing
    CVE-2026-45409 (GHSA-65pc-fj4g-8rjx). The patch adds early
    length checks in encode(), decode(), and check_label() in
    idna/core.py to reject oversized inputs before per-label
    validation runs, preventing CONTEXTO/CONTEXTJ-heavy inputs
    from driving validation into quadratic time complexity.

    CVE: CVE-2026-45409
    Upstream patches:

    This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

    Assisted-by: Ymir
    Co-authored-by: Tomáš Hrnčiar thrnciar@redhat.com

    Downloads