gh-143923: Reject control characters in POP3 commands
authorSeth Michael Larson <seth@python.org>
Tue, 20 Jan 2026 20:46:32 +0000 (14:46 -0600)
committerAndrej Shadura <andrewsh@debian.org>
Sun, 25 Jan 2026 13:37:52 +0000 (14:37 +0100)
commit92bfcc63a75163f36e23bacd5788138e73dba029
treee8621546fea02e5d6bf94c9c8be60ef9582c9654
parentd2f5a3b1cd319fb2933ddb0709455fcd67261cee
gh-143923: Reject control characters in POP3 commands

Origin: backport, https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7

Gbp-Pq: Name CVE-2025-15367.patch
Lib/poplib.py
Lib/test/test_poplib.py
Misc/NEWS.d/next/Security/2026-01-16-11-43-47.gh-issue-143923.DuytMe.rst [new file with mode: 0644]