Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

[security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699) #74643

Copy link
Copy link
@orangetw

Description

@orangetw
mannequin
Issue body actions
BPO 30458
Nosy @gpshead, @jaraco, @vstinner, @larryhastings, @benjaminp, @ned-deily, @ambv, @vadmium, @serhiy-storchaka, @zhangyangyu, @stratakis, @orangetw, @miss-islington, @tirkarthi, @ware, @ret2libc
PRs
  • bpo-30458: Disallow control chars in http URLs. #12755
  • bpo-30458: Disable https related urllib tests on a build without ssl #13032
  • bpo-30458: Use InvalidURL instead of ValueError. #13044
  • [3.7] bpo-30458: Disallow control chars in http URLs. (GH-12755) #13154
  • [3.6] bpo-30458: Disallow control chars in http URLs. (GH-12755) #13155
  • [3.5] bpo-30458: Disallow control chars in http URLs. (GH-12755) #13207
  • [2.7] bpo-30458: Disallow control chars in http URLs. (GH-12755) (GH-13154) #13315
  • bpo-35906: Fix CRLF injection in urllib #12524
  • bpo-35906: Avoid headers injections in urllib #11768
  • bpo-30458: Disallow control chars in http URLs. (GH-12755) #13771
  • bpo-38216, bpo-36274: Allow subclasses to override validation and encoding behavior #16321
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = <Date 2019-12-09.03:10:03.575>
    created_at = <Date 2017-05-24.15:01:31.731>
    labels = ['type-security', 'deferred-blocker', '3.8', '3.9', '3.7', 'library']
    title = '[security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)'
    updated_at = <Date 2019-12-09.03:10:03.572>
    user = 'https://github.com/orangetw'

    bugs.python.org fields:

    activity = <Date 2019-12-09.03:10:03.572>
    actor = 'gregory.p.smith'
    assignee = 'none'
    closed = True
    closed_date = <Date 2019-12-09.03:10:03.575>
    closer = 'gregory.p.smith'
    components = ['Library (Lib)']
    creation = <Date 2017-05-24.15:01:31.731>
    creator = 'orange'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 30458
    keywords = ['patch', 'security_issue']
    message_count = 55.0
    messages = ['294360', '295026', '295067', '306981', '337970', '339754', '339840', '339846', '339848', '339850', '339851', '339852', '339853', '339857', '339858', '339861', '339884', '339894', '340405', '340407', '340408', '341174', '341175', '341176', '341178', '341192', '341234', '341286', '341290', '341291', '341724', '341750', '341906', '341932', '342470', '343045', '343104', '344826', '347282', '347285', '347290', '347897', '350003', '350028', '352451', '352596', '352727', '352731', '352751', '352760', '355246', '355261', '355298', '357988', '358050']
    nosy_count = 16.0
    nosy_names = ['gregory.p.smith', 'jaraco', 'vstinner', 'larry', 'benjamin.peterson', 'ned.deily', 'lukasz.langa', 'martin.panter', 'serhiy.storchaka', 'xiang.zhang', 'cstratak', 'orange', 'miss-islington', 'xtreak', 'ware', 'rschiron']
    pr_nums = ['12755', '13032', '13044', '13154', '13155', '13207', '13315', '12524', '11768', '13771', '16321']
    priority = 'deferred blocker'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue30458'
    versions = ['Python 2.7', 'Python 3.5', 'Python 3.6', 'Python 3.7', 'Python 3.8', 'Python 3.9']

    Reactions are currently unavailable

    Metadata

    Metadata

    Assignees

    No one assigned
      No fields configured for issues without a type.

      Projects

      No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

        Morty Proxy This is a proxified and sanitized view of the page, visit original site.