Skip to content

Conversation

@vstinner
Copy link
Member

@vstinner vstinner commented Nov 18, 2024

  • Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format

Co-authored-by: Gregory P. Smith greg@krypto.org
(cherry picked from commit 29f348e)

…urlsplit are of IPv6 or IPvFuture format (python#103849)

* Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format

---------

Co-authored-by: Gregory P. Smith <greg@krypto.org>
(cherry picked from commit 29f348e)
@vstinner
Copy link
Member Author

@gpshead: Would you mind to proof-read this backport PR to 3.10? I had a minor conflict Lib/urllib/parse.py because urlsplit() has a decorator on Python 3.11 and newer.

@vstinner
Copy link
Member Author

@pablogsal, @ambv: Would you mind to review/merge this security fix?

@vstinner
Copy link
Member Author

@pablogsal, @ambv: Gentle reminder. Would you mind to review/merge this security fix? It would be nice to get this fix in the next batch of security releases (December 3rd).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type-bug An unexpected behavior, bug, or error

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants