AIKIDO-2026-722661

TL;DR

receiveds_format() converts each Received-header hop date through convert_mail_date(), but only catches TypeError and ValueError. An out-of-range year whose epoch seconds overflow int64 raises OverflowError, and a large timezone offset raises OSError from datetime.fromtimestamp(). Those exceptions sit outside the MailParser* hierarchy, so every parse entry point (parse_from_string(), parse_from_bytes(), parse_from_file(), parse_from_file_obj(), and the CLI) aborts the entire message. A single attacker-controlled Received line is enough to drop that message, and a queue worker that handles one mail at a time can lose the batch. The fix also catches OverflowError and OSError and records date_utc = None for that hop so the rest of the message still parses.