◐ Shell
clean mode source ↗

[3.10] gh-103848: Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format (#103849) by vstinner · Pull Request #126975 · python/cpython

Skip to content

Navigation Menu

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Sign up

Appearance settings

Merged

ambv

merged 1 commit into

Dec 2, 2024

Conversation

@vstinner

@vstinner vstinner commented

Nov 18, 2024

edited by bedevere-app Bot

Loading

…urlsplit are of IPv6 or IPvFuture format (python#103849)

* Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format

---------

Co-authored-by: Gregory P. Smith <greg@krypto.org>
(cherry picked from commit 29f348e)

This was referenced

Nov 18, 2024

@vstinner

@gpshead: Would you mind to proof-read this backport PR to 3.10? I had a minor conflict Lib/urllib/parse.py because urlsplit() has a decorator on Python 3.11 and newer.

gpshead

@vstinner

@vstinner

@pablogsal, @ambv: Gentle reminder. Would you mind to review/merge this security fix? It would be nice to get this fix in the next batch of security releases (December 3rd).

Labels

type-bug

An unexpected behavior, bug, or error