Skip to content

[CVE-2018-20852] Cookie domain check returns incorrect results #79302

@bobunderson

Description

@bobunderson
BPO 35121
Nosy @orsenthil, @vstinner, @larryhastings, @benjaminp, @ned-deily, @ambv, @vadmium, @serhiy-storchaka, @miss-islington, @Windsooon, @tirkarthi, @bobunderson, @ret2libc
PRs
  • bpo-35121: prefix dot in domain for proper subdomain validation #10258
  • [3.6] bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) #12260
  • [3.7] bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) #12261
  • [3.4] bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) #12279
  • [3.5] bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) #12281
  • [2.7] bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) #13426
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/benjaminp'
    closed_at = <Date 2019-06-15.16:38:00.513>
    created_at = <Date 2018-10-31.06:52:48.946>
    labels = ['type-security', '3.8', '3.7', 'library', 'release-blocker']
    title = '[CVE-2018-20852] Cookie domain check returns incorrect results'
    updated_at = <Date 2019-07-15.09:42:01.659>
    user = 'https://github.com/bobunderson'

    bugs.python.org fields:

    activity = <Date 2019-07-15.09:42:01.659>
    actor = 'vstinner'
    assignee = 'benjamin.peterson'
    closed = True
    closed_date = <Date 2019-06-15.16:38:00.513>
    closer = 'xtreak'
    components = ['Library (Lib)']
    creation = <Date 2018-10-31.06:52:48.946>
    creator = '\xe8\xa5\xbf\xe7\x94\xb0\xe9\x9b\x84\xe6\xb2\xbb'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 35121
    keywords = ['patch', 'security_issue']
    message_count = 30.0
    messages = ['328973', '328975', '328981', '328985', '329176', '329179', '332299', '332576', '332583', '332920', '335386', '337588', '337590', '337592', '337593', '337598', '337600', '337601', '338109', '338114', '338152', '344555', '344556', '344560', '345689', '345700', '345736', '346748', '346749', '347951']
    nosy_count = 13.0
    nosy_names = ['orsenthil', 'vstinner', 'larry', 'benjamin.peterson', 'ned.deily', 'lukasz.langa', 'martin.panter', 'serhiy.storchaka', 'miss-islington', 'Windson Yang', 'xtreak', '\xe8\xa5\xbf\xe7\x94\xb0\xe9\x9b\x84\xe6\xb2\xbb', 'rschiron']
    pr_nums = ['10258', '12260', '12261', '12279', '12281', '13426']
    priority = 'release blocker'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue35121'
    versions = ['Python 2.7', 'Python 3.4', 'Python 3.5', 'Python 3.6', 'Python 3.7', 'Python 3.8']

    Metadata

    Metadata

    Assignees

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions