Skip to content

Conversation

vstinner
Copy link
Member

@vstinner vstinner commented Nov 18, 2024

  • Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format

Co-authored-by: Gregory P. Smith [email protected]
(cherry picked from commit 29f348e)

…urlsplit are of IPv6 or IPvFuture format (python#103849)

* Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format

---------

Co-authored-by: Gregory P. Smith <[email protected]>
(cherry picked from commit 29f348e)
@vstinner
Copy link
Member Author

@gpshead: Would you mind to proof-read this backport PR to 3.10? I had a minor conflict Lib/urllib/parse.py because urlsplit() has a decorator on Python 3.11 and newer.

@vstinner
Copy link
Member Author

@pablogsal, @ambv: Would you mind to review/merge this security fix?

@vstinner
Copy link
Member Author

@pablogsal, @ambv: Gentle reminder. Would you mind to review/merge this security fix? It would be nice to get this fix in the next batch of security releases (December 3rd).

@ambv ambv merged commit 634ded4 into python:3.10 Dec 2, 2024
15 checks passed
@vstinner vstinner deleted the urlsplit10 branch December 2, 2024 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type-bug An unexpected behavior, bug, or error
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants