traverseda
/
cpython
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

bpo-35907: Clarify the NEWS entry (GH-13557)

This commit is contained in:
Victor Stinner 2019-05-24 23:28:56 +02:00 committed by GitHub
parent 25d8404c35
commit d9d1045837
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
Misc/NEWS.d/next/Library/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst
View File

@ -1,3 +0,0 @@
CVE-2019-9948: Avoid file reading as disallowing the unnecessary URL scheme in
:func:`urllib.urlopen`, :meth:`urllib.URLopener.open` and
:meth:`urllib.URLopener.retrieve`.

3
Misc/NEWS.d/next/Security/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst Normal file
View File

@ -0,0 +1,3 @@
CVE-2019-9948: Avoid file reading by disallowing ``local-file://`` and
``local_file://`` URL schemes in :func:`urllib.urlopen`,
:meth:`urllib.URLopener.open` and :meth:`urllib.URLopener.retrieve`.