[3.9] gh-135462: Fix quadratic complexity in processing special input in HTMLParser...
authorSerhiy Storchaka <storchaka@gmail.com>
Thu, 3 Jul 2025 21:06:00 +0000 (00:06 +0300)
committerArnaud Rebillout <arnaudr@debian.org>
Thu, 14 May 2026 03:00:00 +0000 (10:00 +0700)
commitb07e6410254d7dee669e9972b858e074c030cbf3
tree52f071dec995f4b0231416dcc09520860d2a1b60
parent35ef7c8277055794cedb979a2822ef7f89042b22
[3.9] gh-135462: Fix quadratic complexity in processing special input in HTMLParser (GH-135464) (GH-135486)

End-of-file errors are now handled according to the HTML5 specs --
comments and declarations are automatically closed, tags are ignored.
(cherry picked from commit 6eb6c5dbfb528bd07d77b60fd71fd05d81d45c41)

Origin: upstream, https://github.com/python/cpython/commit/8d1b3dfa09135affbbf27fb8babcf3c11415df49

Gbp-Pq: Name CVE-2025-6069.patch
Lib/html/parser.py
Lib/test/test_htmlparser.py
Misc/NEWS.d/next/Security/2025-06-13-15-55-22.gh-issue-135462.KBeJpc.rst [new file with mode: 0644]