Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.python > #14604

Bug#1012482: rdflib: URLInputSource can be abused to retrieve arbitrary documents if used naïvely

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Control: tags -1 help

Hi all,

Apparently, help is needed from upstream rdflib development team
on the critical security bug #1023399[0] and their respective
entry on their bug tracker[1].  I tried to have a look some time
ago, but didn't make sense of the issue.  I tag the bug
appropriately to raise awareness, in case someone were to have
an idea for a proper patch.

[0]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012482
[1]: https://github.com/RDFLib/rdflib/issues/1844

In hope this helps indeed,
-- 
Étienne Mollier <emollier@emlwks999.eu>
Fingerprint:  8f91 b227 c7d6 f2b1 948c  8236 793c f67e 8f0d 11da
Sent from /dev/pts/3, please excuse my verbosity.
On air: OSI - Set The Controls For The Heart Of The Sun

Back to linux.debian.maint.python | Previous | Next | Find similar | Unroll thread

Thread

Bug#1012482: rdflib: URLInputSource can be abused to retrieve arbitrary documents if used naïvely Étienne Mollier <emollier@emlwks999.eu> - 2022-11-04 19:10 +0100

csiph-web