Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.python > #14604 > unrolled thread

Bug#1012482: rdflib: URLInputSource can be abused to retrieve arbitrary documents if used naïvely

Back to article view | Back to linux.debian.maint.python

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#1012482: rdflib: URLInputSource can be abused to retrieve arbitrary documents if used naïvely Étienne Mollier <emollier@emlwks999.eu> - 2022-11-04 19:10 +0100

#14604 — Bug#1012482: rdflib: URLInputSource can be abused to retrieve arbitrary documents if used naïvely

[Multipart message — attachments visible in raw view] — view raw

Control: tags -1 help

Hi all,

Apparently, help is needed from upstream rdflib development team
on the critical security bug #1023399[0] and their respective
entry on their bug tracker[1].  I tried to have a look some time
ago, but didn't make sense of the issue.  I tag the bug
appropriately to raise awareness, in case someone were to have
an idea for a proper patch.

[0]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012482
[1]: https://github.com/RDFLib/rdflib/issues/1844

In hope this helps indeed,
-- 
Étienne Mollier <emollier@emlwks999.eu>
Fingerprint:  8f91 b227 c7d6 f2b1 948c  8236 793c f67e 8f0d 11da
Sent from /dev/pts/3, please excuse my verbosity.
On air: OSI - Set The Controls For The Heart Of The Sun

[toc] | [standalone]

Back to top | Article view | linux.debian.maint.python

csiph-web