Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.maint.python > #14604
| Path | csiph.com!aioe.org!bofh.it!news.nic.it!robomod |
|---|---|
| From | Étienne Mollier <emollier@emlwks999.eu> |
| Newsgroups | linux.debian.bugs.dist, linux.debian.maint.python |
| Subject | Bug#1012482: rdflib: URLInputSource can be abused to retrieve arbitrary documents if used naïvely |
| Date | Fri, 04 Nov 2022 19:10:01 +0100 |
| Message-ID | <Fo9iF-1nXF-5@gated-at.bofh.it> (permalink) |
| References | <EvX3b-3nyo-1@gated-at.bofh.it> |
| X-Mailbox-Line | From debian-bugs-dist-request@lists.debian.org Fri Nov 4 18:09:09 2022 |
| Old-Return-Path | <debbugs@buxtehude.debian.org> |
| X-Spam-Flag | NO |
| X-Spam-Score | -3.751 |
| Reply-To | Étienne Mollier <emollier@emlwks999.eu>, 1012482@bugs.debian.org |
| Resent-To | debian-bugs-dist@lists.debian.org |
| Resent-Cc | Debian Python Team <team+python@tracker.debian.org> |
| X-Debian-Pr-Message | followup 1012482 |
| X-Debian-Pr-Package | src:rdflib |
| X-Debian-Pr-Keywords | security upstream |
| X-Debian-Pr-Source | rdflib |
| X-Ea-Auth | nRF4EybN5AkFNbPnik9AsW8Bicf/wswjhmtP1tQfda6faP2FAMhi79IlyA4alhiUZbchw+cEwL0YDk9caI/sGn4g7fzgqur8st/DaxwsUlI= |
| MIME-Version | 1.0 |
| Content-Type | multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="6c9K8Pznno26E+C1" |
| Content-Disposition | inline |
| X-Debian-Message | from BTS |
| X-Mailing-List | <debian-bugs-dist@lists.debian.org> archive/latest/1742175 |
| List-ID | <debian-bugs-dist.lists.debian.org> |
| List-URL | <https://lists.debian.org/debian-bugs-dist/> |
| Approved | robomod@news.nic.it |
| Lines | 48 |
| Organization | linux.* mail to news gateway |
| Sender | robomod@news.nic.it |
| X-Original-Cc | debian-python@lists.debian.org |
| X-Original-Date | Fri, 4 Nov 2022 19:07:40 +0100 |
| X-Original-Message-ID | <Y2VU7D6i/wgTFToX@fusion> |
| X-Original-References | <8e0bcfb3-9ad1-2c3e-4051-172614b863aa@debian.org> |
| Xref | csiph.com linux.debian.bugs.dist:1123633 linux.debian.maint.python:14604 |
Cross-posted to 2 groups.
Show key headers only | View raw
[Multipart message — attachments visible in raw view] - view raw
Control: tags -1 help Hi all, Apparently, help is needed from upstream rdflib development team on the critical security bug #1023399[0] and their respective entry on their bug tracker[1]. I tried to have a look some time ago, but didn't make sense of the issue. I tag the bug appropriately to raise awareness, in case someone were to have an idea for a proper patch. [0]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012482 [1]: https://github.com/RDFLib/rdflib/issues/1844 In hope this helps indeed, -- Étienne Mollier <emollier@emlwks999.eu> Fingerprint: 8f91 b227 c7d6 f2b1 948c 8236 793c f67e 8f0d 11da Sent from /dev/pts/3, please excuse my verbosity. On air: OSI - Set The Controls For The Heart Of The Sun
Back to linux.debian.maint.python | Previous | Next | Find similar | Unroll thread
Bug#1012482: rdflib: URLInputSource can be abused to retrieve arbitrary documents if used naïvely Étienne Mollier <emollier@emlwks999.eu> - 2022-11-04 19:10 +0100
csiph-web