Skip to content

Latest commit

 

History

History
6 lines (6 loc) · 414 Bytes

2022-11-04-09-29-36.gh-issue-98433.l76c5G.rst

File metadata and controls

6 lines (6 loc) · 414 Bytes

The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name.