René's URL Explorer Experiment


Title: Issue 17239: XML vulnerabilities in Python - Python tracker

Mail addresses
vstinner@redhat.com

direct link

Domain: bugs.python.org

Nonetext/html; charset=utf-8

Links:

https://bugs.python.org/
Python Homehttps://www.python.org/
Abouthttps://www.python.org/about/
Newshttps://www.python.org/blogs/
Documentationhttps://www.python.org/doc/
Downloadshttps://www.python.org/downloads/
Communityhttps://www.python.org/community/
Foundationhttps://www.python.org/psf/
Developer's Guidehttps://devguide.python.org/
Issue Trackerhttps://bugs.python.org/
Searchhttps://bugs.python.org/issue?@template=search&status=1
Random Issuehttps://bugs.python.org/issue?@action=random
Issues with patchhttps://bugs.python.org/issue?status=1&@sort=-activity&@columns=id%2Cgithub%2Cactivity%2Ctitle%2Ccreator%2Cstatus&@dispname=Issues%20with%20patch&@startwith=0&@group=priority&keywords=2&@action=search&@filter=&@pagesize=50
Easy issueshttps://bugs.python.org/issue?status=1&@sort=-activity&@columns=id%2Cgithub%2Cactivity%2Ctitle%2Ccreator%2Cstatus&@dispname=Easy%20issues&@startwith=0&@group=priority&keywords=6&@action=search&@filter=&@pagesize=50
Statshttps://bugs.python.org/issue?@template=stats
Lost your login?https://bugs.python.org/user?@template=forgotten
User Listhttps://bugs.python.org/user?@sort=username
Committer Listhttps://bugs.python.org/user?iscommitter=1&@action=search&@sort=username&@pagesize=300
Tracker Documentationhttp://docs.python.org/devguide/triaging.html
Tracker Developmenthttp://wiki.python.org/moin/TrackerDevelopment
Report Tracker Problemhttps://github.com/python/psf-infra-meta/issues
https://github.com/python/cpython/issues
GitHubhttps://github.com/python/cpython/issues
see the GitHub FAQs in the Python's Developer Guide.https://devguide.python.org/gh-faq/
This issue has been migrated to GitHub: https://github.com/python/cpython/issues/61441 https://github.com/python/cpython/issues/61441
Titlehttp://docs.python.org/devguide/triaging.html#title
Typehttp://docs.python.org/devguide/triaging.html#type
Stagehttp://docs.python.org/devguide/triaging.html#stage
Componentshttp://docs.python.org/devguide/triaging.html#components
Versionshttp://docs.python.org/devguide/triaging.html#versions
Statushttp://docs.python.org/devguide/triaging.html#status
Resolutionhttp://docs.python.org/devguide/triaging.html#resolution
Dependencieshttp://docs.python.org/devguide/triaging.html#dependencies
17318https://bugs.python.org/issue17318
24238https://bugs.python.org/issue24238
Supersederhttp://docs.python.org/devguide/triaging.html#superseder
Assigned Tohttp://docs.python.org/devguide/triaging.html#assigned-to
Nosy Listhttp://docs.python.org/devguide/triaging.html#nosy-list
Priorityhttp://docs.python.org/devguide/triaging.html#priority
Keywordshttp://docs.python.org/devguide/triaging.html#keywords
xmlbomb_20130219.patchhttps://bugs.python.org/file29122/xmlbomb_20130219.patch
reviewhttps://bugs.python.org/review/17239/#ps7407
xmlbomb_20150518.patchhttps://bugs.python.org/file39415/xmlbomb_20150518.patch
reviewhttps://bugs.python.org/review/17239/#ps14877
PR 9217https://github.com/python/cpython/pull/9217
PR 9265https://github.com/python/cpython/pull/9265
PR 9511https://github.com/python/cpython/pull/9511
PR 9512https://github.com/python/cpython/pull/9512
msg182393https://bugs.python.org/issue17239#msg182393
(view)https://bugs.python.org/msg182393
https://pypi.python.org/pypi/defusedxmlhttps://pypi.python.org/pypi/defusedxml
https://pypi.python.org/pypi/defusedexpathttps://pypi.python.org/pypi/defusedexpat
msg184285https://bugs.python.org/issue17239#msg184285
(view)https://bugs.python.org/msg184285
msg184289https://bugs.python.org/issue17239#msg184289
(view)https://bugs.python.org/msg184289
msg184387https://bugs.python.org/issue17239#msg184387
(view)https://bugs.python.org/msg184387
msg185053https://bugs.python.org/issue17239#msg185053
(view)https://bugs.python.org/msg185053
msg243450https://bugs.python.org/issue17239#msg243450
(view)https://bugs.python.org/msg243450
msg243469https://bugs.python.org/issue17239#msg243469
(view)https://bugs.python.org/msg243469
https://bugzilla.redhat.com/show_bug.cgi?id=1000109#c1https://bugzilla.redhat.com/show_bug.cgi?id=1000109#c1
http://mail-archives.apache.org/mod_mbox/apr-dev/200906.mbox/%3C20090602162934.GA28360@redhat.com%3Ehttp://mail-archives.apache.org/mod_mbox/apr-dev/200906.mbox/%3C20090602162934.GA28360@redhat.com%3E
msg243581https://bugs.python.org/issue17239#msg243581
(view)https://bugs.python.org/msg243581
Issue 24238https://bugs.python.org/issue24238
msg324416https://bugs.python.org/issue17239#msg324416
(view)https://bugs.python.org/msg324416
https://docs.python.org/dev/library/xml.htmlhttps://docs.python.org/dev/library/xml.html
https://docs.python.org/2.7/library/xml.htmlhttps://docs.python.org/2.7/library/xml.html
https://docs.python.org/3.4/library/xml.htmlhttps://docs.python.org/3.4/library/xml.html
bpo-17318https://bugs.python.org/issue17318
bpo-17239https://bugs.python.org/issue17239
bpo-24238https://bugs.python.org/issue24238
msg324685https://bugs.python.org/issue17239#msg324685
(view)https://bugs.python.org/msg324685
bpo-17318https://bugs.python.org/issue17318
bpo-17239https://bugs.python.org/issue17239
bpo-24238https://bugs.python.org/issue24238
msg325562https://bugs.python.org/issue17239#msg325562
(view)https://bugs.python.org/msg325562
msg325573https://bugs.python.org/issue17239#msg325573
(view)https://bugs.python.org/msg325573
msg325586https://bugs.python.org/issue17239#msg325586
(view)https://bugs.python.org/msg325586
msg325590https://bugs.python.org/issue17239#msg325590
(view)https://bugs.python.org/msg325590
msg325595https://bugs.python.org/issue17239#msg325595
(view)https://bugs.python.org/msg325595
Modules/expat/https://github.com/python/cpython/blob/master/Modules/expat/
msg325610https://bugs.python.org/issue17239#msg325610
(view)https://bugs.python.org/msg325610
msg325642https://bugs.python.org/issue17239#msg325642
(view)https://bugs.python.org/msg325642
https://pythondev.readthedocs.io/cpython.html#vendored-external-librarieshttps://pythondev.readthedocs.io/cpython.html#vendored-external-libraries
msg325648https://bugs.python.org/issue17239#msg325648
(view)https://bugs.python.org/msg325648
Modules/expathttps://github.com/python/cpython/blob/master/Modules/expat
msg325702https://bugs.python.org/issue17239#msg325702
(view)https://bugs.python.org/msg325702
4e21100fa7bf66e0b32146d3f46ae16afc73fee1https://hg.python.org/lookup/4e21100fa7bf66e0b32146d3f46ae16afc73fee1
5033aa77aacaa5505636f150e8d54baac5bdca9chttps://hg.python.org/lookup/5033aa77aacaa5505636f150e8d54baac5bdca9c
msg325738https://bugs.python.org/issue17239#msg325738
(view)https://bugs.python.org/msg325738
4e21100fa7bf66e0b32146d3f46ae16afc73fee1https://hg.python.org/lookup/4e21100fa7bf66e0b32146d3f46ae16afc73fee1
5033aa77aacaa5505636f150e8d54baac5bdca9chttps://hg.python.org/lookup/5033aa77aacaa5505636f150e8d54baac5bdca9c
bpo-30694https://bugs.python.org/issue30694
Modules/expat/https://github.com/python/cpython/blob/master/Modules/expat/
Modules/expat/expat_external.hhttps://github.com/python/cpython/blob/master/Modules/expat/expat_external.h
bpo-29591https://bugs.python.org/issue29591
bpo-30797https://bugs.python.org/issue30797
bpo-30947https://bugs.python.org/issue30947
Modules/expat/loadlibrary.chttps://github.com/python/cpython/blob/master/Modules/expat/loadlibrary.c
PC/VS9.0/https://github.com/python/cpython/blob/master/PC/VS9.0/
bpo-31170https://bugs.python.org/issue31170
msg326144https://bugs.python.org/issue17239#msg326144
(view)https://bugs.python.org/msg326144
17b1d5d4e36aa57a9b25a0e694affbd1ee637e45https://hg.python.org/lookup/17b1d5d4e36aa57a9b25a0e694affbd1ee637e45
bpo-17239https://bugs.python.org/issue17239
GH-9217https://github.com/python/cpython/pull/9217
https://github.com/python/cpython/commit/17b1d5d4e36aa57a9b25a0e694affbd1ee637e45https://github.com/python/cpython/commit/17b1d5d4e36aa57a9b25a0e694affbd1ee637e45
msg326228https://bugs.python.org/issue17239#msg326228
(view)https://bugs.python.org/msg326228
582d188e6e3487180891f1fc457a80dec8be26a8https://hg.python.org/lookup/582d188e6e3487180891f1fc457a80dec8be26a8
bpo-17239https://bugs.python.org/issue17239
GH-9217https://github.com/python/cpython/pull/9217
GH-9512https://github.com/python/cpython/pull/9512
https://github.com/python/cpython/commit/582d188e6e3487180891f1fc457a80dec8be26a8https://github.com/python/cpython/commit/582d188e6e3487180891f1fc457a80dec8be26a8
msg326229https://bugs.python.org/issue17239#msg326229
(view)https://bugs.python.org/msg326229
394e55a9279d17240ef6fe85d3b4ea3fe7b6dff5https://hg.python.org/lookup/394e55a9279d17240ef6fe85d3b4ea3fe7b6dff5
bpo-17239https://bugs.python.org/issue17239
GH-9217https://github.com/python/cpython/pull/9217
GH-9511https://github.com/python/cpython/pull/9511
https://github.com/python/cpython/commit/394e55a9279d17240ef6fe85d3b4ea3fe7b6dff5https://github.com/python/cpython/commit/394e55a9279d17240ef6fe85d3b4ea3fe7b6dff5
vstinnerhttps://bugs.python.org/user2377
msg405686https://bugs.python.org/msg405686
msg405689https://bugs.python.org/msg405689
barryhttps://bugs.python.org/user19
georg.brandlhttps://bugs.python.org/user93
rhettingerhttps://bugs.python.org/user114
pitrouhttps://bugs.python.org/user2040
scoderhttps://bugs.python.org/user2153
vstinnerhttps://bugs.python.org/user2377
larryhttps://bugs.python.org/user2731
christian.heimeshttps://bugs.python.org/user3108
benjamin.petersonhttps://bugs.python.org/user4455
jwilkhttps://bugs.python.org/user4692
ned.deilyhttps://bugs.python.org/user5248
mceplhttps://bugs.python.org/user5290
ezio.melottihttps://bugs.python.org/user7047
Arfreverhttps://bugs.python.org/user9138
eli.benderskyhttps://bugs.python.org/user9740
mitarhttps://bugs.python.org/user10982
martin.panterhttps://bugs.python.org/user14751
serhiy.storchakahttps://bugs.python.org/user15623
franckhttps://bugs.python.org/user16283
steve.dowerhttps://bugs.python.org/user16632
rsandwick3https://bugs.python.org/user17399
ahmedsayeed1982https://bugs.python.org/user40940
msg405689https://bugs.python.org/msg405689
ahmedsayeed1982https://bugs.python.org/user40940
barryhttps://bugs.python.org/user19
georg.brandlhttps://bugs.python.org/user93
rhettingerhttps://bugs.python.org/user114
pitrouhttps://bugs.python.org/user2040
scoderhttps://bugs.python.org/user2153
vstinnerhttps://bugs.python.org/user2377
larryhttps://bugs.python.org/user2731
christian.heimeshttps://bugs.python.org/user3108
benjamin.petersonhttps://bugs.python.org/user4455
jwilkhttps://bugs.python.org/user4692
ned.deilyhttps://bugs.python.org/user5248
mceplhttps://bugs.python.org/user5290
ezio.melottihttps://bugs.python.org/user7047
Arfreverhttps://bugs.python.org/user9138
eli.benderskyhttps://bugs.python.org/user9740
mitarhttps://bugs.python.org/user10982
martin.panterhttps://bugs.python.org/user14751
serhiy.storchakahttps://bugs.python.org/user15623
franckhttps://bugs.python.org/user16283
steve.dowerhttps://bugs.python.org/user16632
rsandwick3https://bugs.python.org/user17399
miss-islingtonhttps://bugs.python.org/user27838
msg405686https://bugs.python.org/msg405686
issue17318 supersederhttps://bugs.python.org/issue17318
djchttps://bugs.python.org/user5277
mitarhttps://bugs.python.org/user10982
msg326229https://bugs.python.org/msg326229
msg326228https://bugs.python.org/msg326228
pull_request8918https://bugs.python.org/pull_request8918
pull_request8917https://bugs.python.org/pull_request8917
miss-islingtonhttps://bugs.python.org/user27838
msg326144https://bugs.python.org/msg326144
msg325738https://bugs.python.org/msg325738
msg325702https://bugs.python.org/msg325702
msg325648https://bugs.python.org/msg325648
msg325642https://bugs.python.org/msg325642
msg325610https://bugs.python.org/msg325610
msg325595https://bugs.python.org/msg325595
msg325590https://bugs.python.org/msg325590
christian.heimeshttps://bugs.python.org/user3108
msg325586https://bugs.python.org/msg325586
msg325573https://bugs.python.org/msg325573
steve.dowerhttps://bugs.python.org/user16632
ned.deilyhttps://bugs.python.org/user5248
msg325562https://bugs.python.org/msg325562
pull_request8697https://bugs.python.org/pull_request8697
pull_request8649https://bugs.python.org/pull_request8649
msg324685https://bugs.python.org/msg324685
vstinnerhttps://bugs.python.org/user2377
msg324416https://bugs.python.org/msg324416
mceplhttps://bugs.python.org/user5290
christian.heimeshttps://bugs.python.org/user3108
xml.sax and xml.dom fetch DTDs by defaulthttps://bugs.python.org/issue17318
Avoid entity expansion attacks in Element Treehttps://bugs.python.org/issue24238
scoderhttps://bugs.python.org/user2153
msg243581https://bugs.python.org/msg243581
msg243469https://bugs.python.org/msg243469
xmlbomb_20150518.patchhttps://bugs.python.org/file39415
msg243450https://bugs.python.org/msg243450
jwilkhttps://bugs.python.org/user4692
martin.panterhttps://bugs.python.org/user14751
rsandwick3https://bugs.python.org/user17399
msg185053https://bugs.python.org/msg185053
pitrouhttps://bugs.python.org/user2040
msg184387https://bugs.python.org/msg184387
rhettingerhttps://bugs.python.org/user114
msg184289https://bugs.python.org/msg184289
msg184285https://bugs.python.org/msg184285
Arfreverhttps://bugs.python.org/user9138
djchttps://bugs.python.org/user5277
serhiy.storchakahttps://bugs.python.org/user15623
franckhttps://bugs.python.org/user16283
ezio.melottihttps://bugs.python.org/user7047
eli.benderskyhttps://bugs.python.org/user9740
The Python Software Foundationhttps://python.org/psf-landing/
Rounduphttp://roundup.sourceforge.net
Python Software Foundationhttp://python.org/psf
Legal Statementshttp://python.org/about/legal
URLs of crawlers that visited me.