rpms/python-idna
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Internationalized Domain Names in Applications (IDNA)
10 Commits 25 Branches 32 Tags 142 KiB
RPM Spec 100%
c9s
Go to file
RHEL Packaging Agent cda423ee86 Fix CVE-2026-45409: quadratic time complexity in IDNA validation 
Security fix for CVE-2026-45409: IDNA encode/decode and
check_label now reject inputs exceeding the maximum DNS domain
length before per-codepoint validation runs. This prevents
CONTEXTO-heavy labels from driving validation into quadratic
time. The patch was adapted for v2.10 compatibility by using
IncrementalEncoder directly from idna.codec instead of the
'idna2008' codec name introduced in v3.x.

CVE: CVE-2026-45409
Upstream patches:
 - c0dda4501d.patch
 - e1cb465b63.patch
Resolves: RHEL-215653

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-27 07:15:18 +00:00
.fmf Add gating configuration and a simple smoke test 2022-02-21 15:31:10 +01:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-14 19:00:17 -07:00
CVE-2024-3651.patch Security fix for CVE-2024-3651 2024-04-23 12:11:25 +02:00
CVE-2026-45409.patch Fix CVE-2026-45409: quadratic time complexity in IDNA validation 2026-07-27 07:15:18 +00:00
gating.yaml Add gating configuration and a simple smoke test 2022-02-21 15:31:10 +01:00
plans.fmf Add gating configuration and a simple smoke test 2022-02-21 15:31:10 +01:00
python-idna.spec Fix CVE-2026-45409: quadratic time complexity in IDNA validation 2026-07-27 07:15:18 +00:00
sources RHEL 9.0.0 Alpha bootstrap 2020-10-14 19:00:17 -07:00