rpms/python-idna
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Internationalized Domain Names in Applications (IDNA)
5 Commits 25 Branches 32 Tags 142 KiB
RPM Spec 100%
c86a94e122
Go to file
RHEL Packaging Agent c86a94e122 Fix CVE-2026-45409: quadratic time complexity in IDNA validation 
Add patch CVE-2026-45409.patch to enforce early length limits in
encode(), decode(), and check_label() so that CONTEXTO-heavy
inputs cannot drive per-codepoint validation into quadratic
time. The patch also adapts the upstream test to work with the
v2.5 codec API by using idna.codec.IncrementalEncoder directly
instead of codecs.getincrementalencoder("idna2008").

CVE: CVE-2026-45409
Upstream patches:
 - c0dda4501d.patch
 - e1cb465b63.patch
Resolves: RHEL-215650

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
Co-authored-by: Tomáš Hrnčiar <thrnciar@redhat.com>
2026-08-06 11:12:52 +02:00
.gitignore Auto sync2gitlab import of python-idna-2.5-5.el8.src.rpm 2022-05-26 13:35:36 -04:00
CVE-2024-3651.patch Fix patch application for security fix for CVE-2024-3651 2024-04-25 15:33:15 +02:00
CVE-2026-45409.patch Fix CVE-2026-45409: quadratic time complexity in IDNA validation 2026-08-06 11:12:52 +02:00
python-idna.spec Fix CVE-2026-45409: quadratic time complexity in IDNA validation 2026-08-06 11:12:52 +02:00
sources Auto sync2gitlab import of python-idna-2.5-5.el8.src.rpm 2022-05-26 13:35:36 -04:00