Internationalized Domain Names in Applications (IDNA)

RHEL Packaging Agent 2005a8a7b5 Fix CVE-2026-45409: quadratic time complexity in IDNA validation ... Backport two upstream commits (c0dda45, e1cb465) fixing CVE-2026-45409 (GHSA-65pc-fj4g-8rjx). The patch adds early length checks in encode(), decode(), and check_label() in idna/core.py to reject oversized inputs before per-label validation runs, preventing CONTEXTO/CONTEXTJ-heavy inputs from driving validation into quadratic time complexity. CVE: CVE-2026-45409 Upstream patches: - c0dda4501d.patch - e1cb465b63.patch Resolves: RHEL-215651 This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent. Assisted-by: Ymir Co-authored-by: Tomáš Hrnčiar <thrnciar@redhat.com>		2026-08-10 10:46:24 +02:00
.fmf	Add gating configuration and a simple smoke test	2024-07-04 15:22:24 +00:00
.gitignore	Update to 3.7 (rhbz#2274439)	2024-04-11 09:05:47 +02:00
changelog	Convert to %autorelease and %autochangelog	2024-01-29 15:36:52 +01:00
CVE-2026-45409.patch	Fix CVE-2026-45409: quadratic time complexity in IDNA validation	2026-08-10 10:46:24 +02:00
gating.yaml	Add gating configuration and a simple smoke test	2024-07-04 15:22:24 +00:00
plans.fmf	Add gating configuration and a simple smoke test	2024-07-04 15:22:24 +00:00
python-idna.spec	Fix CVE-2026-45409: quadratic time complexity in IDNA validation	2026-08-10 10:46:24 +02:00
rpminspect.yaml	rpminspect: Disable the unicode inspection	2024-11-11 20:19:09 +01:00
sources	Update to 3.7 (rhbz#2274439)	2024-04-11 09:05:47 +02:00