René's URL Explorer Experiment


Title: Issue 43882: [security] CVE-2022-0391: urllib.parse should sanitize urls containing ASCII newline and tabs. - Python tracker

Mail addresses
mike@free.law

direct link

Domain: bugs.python.org

Nonetext/html; charset=utf-8

Links:

https://bugs.python.org/
Python Homehttps://www.python.org/
Abouthttps://www.python.org/about/
Newshttps://www.python.org/blogs/
Documentationhttps://www.python.org/doc/
Downloadshttps://www.python.org/downloads/
Communityhttps://www.python.org/community/
Foundationhttps://www.python.org/psf/
Developer's Guidehttps://devguide.python.org/
Issue Trackerhttps://bugs.python.org/
Searchhttps://bugs.python.org/issue?@template=search&status=1
Random Issuehttps://bugs.python.org/issue?@action=random
Issues with patchhttps://bugs.python.org/issue?status=1&@sort=-activity&@columns=id%2Cgithub%2Cactivity%2Ctitle%2Ccreator%2Cstatus&@dispname=Issues%20with%20patch&@startwith=0&@group=priority&keywords=2&@action=search&@filter=&@pagesize=50
Easy issueshttps://bugs.python.org/issue?status=1&@sort=-activity&@columns=id%2Cgithub%2Cactivity%2Ctitle%2Ccreator%2Cstatus&@dispname=Easy%20issues&@startwith=0&@group=priority&keywords=6&@action=search&@filter=&@pagesize=50
Statshttps://bugs.python.org/issue?@template=stats
Lost your login?https://bugs.python.org/user?@template=forgotten
User Listhttps://bugs.python.org/user?@sort=username
Committer Listhttps://bugs.python.org/user?iscommitter=1&@action=search&@sort=username&@pagesize=300
Tracker Documentationhttp://docs.python.org/devguide/triaging.html
Tracker Developmenthttp://wiki.python.org/moin/TrackerDevelopment
Report Tracker Problemhttps://github.com/python/psf-infra-meta/issues
https://github.com/python/cpython/issues
GitHubhttps://github.com/python/cpython/issues
see the GitHub FAQs in the Python's Developer Guide.https://devguide.python.org/gh-faq/
This issue has been migrated to GitHub: https://github.com/python/cpython/issues/88048 https://github.com/python/cpython/issues/88048
Titlehttp://docs.python.org/devguide/triaging.html#title
Typehttp://docs.python.org/devguide/triaging.html#type
Stagehttp://docs.python.org/devguide/triaging.html#stage
Componentshttp://docs.python.org/devguide/triaging.html#components
Versionshttp://docs.python.org/devguide/triaging.html#versions
Statushttp://docs.python.org/devguide/triaging.html#status
Resolutionhttp://docs.python.org/devguide/triaging.html#resolution
Dependencieshttp://docs.python.org/devguide/triaging.html#dependencies
Supersederhttp://docs.python.org/devguide/triaging.html#superseder
Assigned Tohttp://docs.python.org/devguide/triaging.html#assigned-to
Nosy Listhttp://docs.python.org/devguide/triaging.html#nosy-list
Priorityhttp://docs.python.org/devguide/triaging.html#priority
Keywordshttp://docs.python.org/devguide/triaging.html#keywords
PR 25595https://github.com/python/cpython/pull/25595
PR 25725https://github.com/python/cpython/pull/25725
PR 25726https://github.com/python/cpython/pull/25726
PR 25727https://github.com/python/cpython/pull/25727
PR 25728https://github.com/python/cpython/pull/25728
PR 25853https://github.com/python/cpython/pull/25853
PR 25921https://github.com/python/cpython/pull/25921
PR 25923https://github.com/python/cpython/pull/25923
PR 25924https://github.com/python/cpython/pull/25924
PR 25936https://github.com/python/cpython/pull/25936
PR 26267https://github.com/python/cpython/pull/26267
PR 26268https://github.com/python/cpython/pull/26268
PR 26275https://github.com/python/cpython/pull/26275
PR 26276https://github.com/python/cpython/pull/26276
PR 26277https://github.com/python/cpython/pull/26277
msg391343https://bugs.python.org/issue43882#msg391343
(view)https://bugs.python.org/msg391343
https://url.spec.whatwg.org/#concept-basic-url-parserhttps://url.spec.whatwg.org/#concept-basic-url-parser
msg391352https://bugs.python.org/issue43882#msg391352
(view)https://bugs.python.org/msg391352
https://bugs.python.org/issue30713https://bugs.python.org/issue30713
https://bugs.python.org/issue30458https://bugs.python.org/issue30458
msg391426https://bugs.python.org/issue43882#msg391426
(view)https://bugs.python.org/msg391426
bpo-43883https://bugs.python.org/issue43883
msg391859https://bugs.python.org/issue43882#msg391859
(view)https://bugs.python.org/msg391859
msg392334https://bugs.python.org/issue43882#msg392334
(view)https://bugs.python.org/msg392334
76cd81d60310d65d01f9d7b48a8985d8ab89c8b4https://hg.python.org/lookup/76cd81d60310d65d01f9d7b48a8985d8ab89c8b4
bpo-43882https://bugs.python.org/issue43882
GH-25595https://github.com/python/cpython/pull/25595
https://github.com/python/cpython/commit/76cd81d60310d65d01f9d7b48a8985d8ab89c8b4https://github.com/python/cpython/commit/76cd81d60310d65d01f9d7b48a8985d8ab89c8b4
msg392338https://bugs.python.org/issue43882#msg392338
(view)https://bugs.python.org/msg392338
491fde0161d5e527eeff8586dd3972d7d3a631a7https://hg.python.org/lookup/491fde0161d5e527eeff8586dd3972d7d3a631a7
bpo-43882https://bugs.python.org/issue43882
GH-25595https://github.com/python/cpython/pull/25595
GH-25725https://github.com/python/cpython/pull/25725
https://github.com/python/cpython/commit/491fde0161d5e527eeff8586dd3972d7d3a631a7https://github.com/python/cpython/commit/491fde0161d5e527eeff8586dd3972d7d3a631a7
msg392611https://bugs.python.org/issue43882#msg392611
(view)https://bugs.python.org/msg392611
https://github.com/python/cpython/pull/25726#pullrequestreview-649803605https://github.com/python/cpython/pull/25726#pullrequestreview-649803605
msg392781https://bugs.python.org/issue43882#msg392781
(view)https://bugs.python.org/msg392781
msg392808https://bugs.python.org/issue43882#msg392808
(view)https://bugs.python.org/msg392808
https://github.com/python/cpython/pull/25853https://github.com/python/cpython/pull/25853
https://github.com/python/cpython/pull/25726https://github.com/python/cpython/pull/25726
msg392835https://bugs.python.org/issue43882#msg392835
(view)https://bugs.python.org/msg392835
8a595744e696a0fb92dccc5d4e45da41571270a1https://hg.python.org/lookup/8a595744e696a0fb92dccc5d4e45da41571270a1
bpo-43882https://bugs.python.org/issue43882
#25853https://bugs.python.org/issue25853
https://github.com/python/cpython/commit/8a595744e696a0fb92dccc5d4e45da41571270a1https://github.com/python/cpython/commit/8a595744e696a0fb92dccc5d4e45da41571270a1
msg392873https://bugs.python.org/issue43882#msg392873
(view)https://bugs.python.org/msg392873
https://github.com/boto/botocore/issues/2377https://github.com/boto/botocore/issues/2377
https://code.djangoproject.com/ticket/32713https://code.djangoproject.com/ticket/32713
msg392926https://bugs.python.org/issue43882#msg392926
(view)https://bugs.python.org/msg392926
https://www.blackhat.com/docs/us-17/thursday/us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdfhttps://www.blackhat.com/docs/us-17/thursday/us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf
msg392944https://bugs.python.org/issue43882#msg392944
(view)https://bugs.python.org/msg392944
https://bugs.python.org/issue43883https://bugs.python.org/issue43883
msg392971https://bugs.python.org/issue43882#msg392971
(view)https://bugs.python.org/msg392971
issue43883https://bugs.python.org/issue43883
msg392995https://bugs.python.org/issue43882#msg392995
(view)https://bugs.python.org/msg392995
msg393009https://bugs.python.org/issue43882#msg393009
(view)https://bugs.python.org/msg393009
https://github.com/django/django/pull/14349#pullrequestreview-652022529https://github.com/django/django/pull/14349#pullrequestreview-652022529
msg393025https://bugs.python.org/issue43882#msg393025
(view)https://bugs.python.org/msg393025
515a7bc4e13645d0945b46a8e1d9102b918cd407https://hg.python.org/lookup/515a7bc4e13645d0945b46a8e1d9102b918cd407
bpo-43882https://bugs.python.org/issue43882
GH-25595https://github.com/python/cpython/pull/25595
#25726https://bugs.python.org/issue25726
https://github.com/python/cpython/commit/515a7bc4e13645d0945b46a8e1d9102b918cd407https://github.com/python/cpython/commit/515a7bc4e13645d0945b46a8e1d9102b918cd407
msg393030https://bugs.python.org/issue43882#msg393030
(view)https://bugs.python.org/msg393030
msg393033https://bugs.python.org/issue43882#msg393033
(view)https://bugs.python.org/msg393033
msg393034https://bugs.python.org/issue43882#msg393034
(view)https://bugs.python.org/msg393034
msg393039https://bugs.python.org/issue43882#msg393039
(view)https://bugs.python.org/msg393039
msg393049https://bugs.python.org/issue43882#msg393049
(view)https://bugs.python.org/msg393049
24f1d1a8a2c4aa58a606b4b6d5fa4305a3b91705https://hg.python.org/lookup/24f1d1a8a2c4aa58a606b4b6d5fa4305a3b91705
bpo-43882https://bugs.python.org/issue43882
GH-25936https://github.com/python/cpython/pull/25936
https://github.com/python/cpython/commit/24f1d1a8a2c4aa58a606b4b6d5fa4305a3b91705https://github.com/python/cpython/commit/24f1d1a8a2c4aa58a606b4b6d5fa4305a3b91705
msg393107https://bugs.python.org/issue43882#msg393107
(view)https://bugs.python.org/msg393107
f4dac7ec55477a6c5d965e594e74bd6bda786903https://hg.python.org/lookup/f4dac7ec55477a6c5d965e594e74bd6bda786903
bpo-43882https://bugs.python.org/issue43882
GH-25923https://github.com/python/cpython/pull/25923
https://github.com/python/cpython/commit/f4dac7ec55477a6c5d965e594e74bd6bda786903https://github.com/python/cpython/commit/f4dac7ec55477a6c5d965e594e74bd6bda786903
msg393108https://bugs.python.org/issue43882#msg393108
(view)https://bugs.python.org/msg393108
6c472d3a1d334d4eeb4a25eba7bf3b01611bf667https://hg.python.org/lookup/6c472d3a1d334d4eeb4a25eba7bf3b01611bf667
bpo-43882https://bugs.python.org/issue43882
GH-25924https://github.com/python/cpython/pull/25924
https://github.com/python/cpython/commit/6c472d3a1d334d4eeb4a25eba7bf3b01611bf667https://github.com/python/cpython/commit/6c472d3a1d334d4eeb4a25eba7bf3b01611bf667
msg393136https://bugs.python.org/issue43882#msg393136
(view)https://bugs.python.org/msg393136
https://github.com/python/cpython/commit/985ac016373403e8ad41f8d563c4355ffa8d49ffhttps://github.com/python/cpython/commit/985ac016373403e8ad41f8d563c4355ffa8d49ff
msg393139https://bugs.python.org/issue43882#msg393139
(view)https://bugs.python.org/msg393139
http://my_openstack_region.cloud.archive.ubuntu.com/ubuntuhttp://my_openstack_region.cloud.archive.ubuntu.com/ubuntu
http://my-openstack-region.cloud.archive.ubuntu.com/ubuntuhttp://my-openstack-region.cloud.archive.ubuntu.com/ubuntu
https://bugs.launchpad.net/cloud-init/+bug/1868232https://bugs.launchpad.net/cloud-init/+bug/1868232
http://myhttp://my
msg393142https://bugs.python.org/issue43882#msg393142
(view)https://bugs.python.org/msg393142
msg393144https://bugs.python.org/issue43882#msg393144
(view)https://bugs.python.org/msg393144
msg393146https://bugs.python.org/issue43882#msg393146
(view)https://bugs.python.org/msg393146
msg393149https://bugs.python.org/issue43882#msg393149
(view)https://bugs.python.org/msg393149
https://github.com/canonical/cloud-init/commit/c478d0bff412c67280dfe8f08568de733f9425a1https://github.com/canonical/cloud-init/commit/c478d0bff412c67280dfe8f08568de733f9425a1
msg393150https://bugs.python.org/issue43882#msg393150
(view)https://bugs.python.org/msg393150
msg393198https://bugs.python.org/issue43882#msg393198
(view)https://bugs.python.org/msg393198
GH-25924https://github.com/python/cpython/pull/25924
GH-25924https://github.com/python/cpython/pull/25924
msg393203https://bugs.python.org/issue43882#msg393203
(view)https://bugs.python.org/msg393203
https://github.com/python/cpython/pull/25595#pullrequestreview-647122723https://github.com/python/cpython/pull/25595#pullrequestreview-647122723
msg393205https://bugs.python.org/issue43882#msg393205
(view)https://bugs.python.org/msg393205
msg393207https://bugs.python.org/issue43882#msg393207
(view)https://bugs.python.org/msg393207
issue43883https://bugs.python.org/issue43883
https://bugs.python.org/issue43882#msg393033https://bugs.python.org/issue43882#msg393033
msg393211https://bugs.python.org/issue43882#msg393211
(view)https://bugs.python.org/msg393211
msg393997https://bugs.python.org/issue43882#msg393997
(view)https://bugs.python.org/msg393997
msg394056https://bugs.python.org/issue43882#msg394056
(view)https://bugs.python.org/msg394056
c723d5191110f99849f7b0944820f6c3cd5f7747https://hg.python.org/lookup/c723d5191110f99849f7b0944820f6c3cd5f7747
bpo-43882https://bugs.python.org/issue43882
GH-26267https://github.com/python/cpython/pull/26267
https://github.com/python/cpython/commit/c723d5191110f99849f7b0944820f6c3cd5f7747https://github.com/python/cpython/commit/c723d5191110f99849f7b0944820f6c3cd5f7747
msg394057https://bugs.python.org/issue43882#msg394057
(view)https://bugs.python.org/msg394057
6f743e7a4da904f61dfa84cc7d7385e4dcc79ac5https://hg.python.org/lookup/6f743e7a4da904f61dfa84cc7d7385e4dcc79ac5
bpo-43882https://bugs.python.org/issue43882
GH-26268https://github.com/python/cpython/pull/26268
https://github.com/python/cpython/commit/6f743e7a4da904f61dfa84cc7d7385e4dcc79ac5https://github.com/python/cpython/commit/6f743e7a4da904f61dfa84cc7d7385e4dcc79ac5
msg394058https://bugs.python.org/issue43882#msg394058
(view)https://bugs.python.org/msg394058
msg394062https://bugs.python.org/issue43882#msg394062
(view)https://bugs.python.org/msg394062
msg394112https://bugs.python.org/issue43882#msg394112
(view)https://bugs.python.org/msg394112
f14015adf52014c2345522fe32d43f15f001c986https://hg.python.org/lookup/f14015adf52014c2345522fe32d43f15f001c986
bpo-43882https://bugs.python.org/issue43882
GH-26275https://github.com/python/cpython/pull/26275
https://github.com/python/cpython/commit/f14015adf52014c2345522fe32d43f15f001c986https://github.com/python/cpython/commit/f14015adf52014c2345522fe32d43f15f001c986
msg394113https://bugs.python.org/issue43882#msg394113
(view)https://bugs.python.org/msg394113
0593ae84af9e0e8332644e7ed13d7fd8306c4e1ahttps://hg.python.org/lookup/0593ae84af9e0e8332644e7ed13d7fd8306c4e1a
bpo-43882https://bugs.python.org/issue43882
GH-26276https://github.com/python/cpython/pull/26276
https://github.com/python/cpython/commit/0593ae84af9e0e8332644e7ed13d7fd8306c4e1ahttps://github.com/python/cpython/commit/0593ae84af9e0e8332644e7ed13d7fd8306c4e1a
msg396628https://bugs.python.org/issue43882#msg396628
(view)https://bugs.python.org/msg396628
634da2de88af06eb8c6ebdb90d8c00005847063dhttps://hg.python.org/lookup/634da2de88af06eb8c6ebdb90d8c00005847063d
bpo-43882https://bugs.python.org/issue43882
#26277https://bugs.python.org/issue26277
https://github.com/python/cpython/commit/634da2de88af06eb8c6ebdb90d8c00005847063dhttps://github.com/python/cpython/commit/634da2de88af06eb8c6ebdb90d8c00005847063d
msg412688https://bugs.python.org/issue43882#msg412688
(view)https://bugs.python.org/msg412688
msg412705https://bugs.python.org/issue43882#msg412705
(view)https://bugs.python.org/msg412705
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391
msg412821https://bugs.python.org/issue43882#msg412821
(view)https://bugs.python.org/msg412821
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391
felixxmhttps://bugs.python.org/user32742
msg412821https://bugs.python.org/msg412821
msg412705https://bugs.python.org/msg412705
vstinnerhttps://bugs.python.org/user2377
msg412688https://bugs.python.org/msg412688
msg396628https://bugs.python.org/msg396628
msg394113https://bugs.python.org/msg394113
msg394112https://bugs.python.org/msg394112
pull_request24883https://bugs.python.org/pull_request24883
pull_request24882https://bugs.python.org/pull_request24882
pull_request24881https://bugs.python.org/pull_request24881
msg394062https://bugs.python.org/msg394062
msg394058https://bugs.python.org/msg394058
msg394057https://bugs.python.org/msg394057
msg394056https://bugs.python.org/msg394056
pull_request24872https://bugs.python.org/pull_request24872
pull_request24871https://bugs.python.org/pull_request24871
pablogsalhttps://bugs.python.org/user26865
msg393997https://bugs.python.org/msg393997
msg393211https://bugs.python.org/msg393211
msg393207https://bugs.python.org/msg393207
msg393205https://bugs.python.org/msg393205
msg393203https://bugs.python.org/msg393203
msg393198https://bugs.python.org/msg393198
msg393150https://bugs.python.org/msg393150
msg393149https://bugs.python.org/msg393149
msg393146https://bugs.python.org/msg393146
msg393144https://bugs.python.org/msg393144
ned.deilyhttps://bugs.python.org/user5248
msg393142https://bugs.python.org/msg393142
odd_blokehttps://bugs.python.org/user9548
ned.deilyhttps://bugs.python.org/user5248
msg393139https://bugs.python.org/msg393139
msg393136https://bugs.python.org/msg393136
msg393108https://bugs.python.org/msg393108
ned.deilyhttps://bugs.python.org/user5248
msg393107https://bugs.python.org/msg393107
msg393049https://bugs.python.org/msg393049
pull_request24603https://bugs.python.org/pull_request24603
msg393039https://bugs.python.org/msg393039
msg393034https://bugs.python.org/msg393034
msg393033https://bugs.python.org/msg393033
msg393030https://bugs.python.org/msg393030
pull_request24591https://bugs.python.org/pull_request24591
pull_request24590https://bugs.python.org/pull_request24590
msg393025https://bugs.python.org/msg393025
pull_request24589https://bugs.python.org/pull_request24589
apollo13https://bugs.python.org/user13552
msg393009https://bugs.python.org/msg393009
msg392995https://bugs.python.org/msg392995
msg392971https://bugs.python.org/msg392971
msg392944https://bugs.python.org/msg392944
sethmlarsonhttps://bugs.python.org/user36524
msg392926https://bugs.python.org/msg392926
mgornyhttps://bugs.python.org/user13113
msg392873https://bugs.python.org/msg392873
msg392835https://bugs.python.org/msg392835
msg392808https://bugs.python.org/msg392808
pull_request24537https://bugs.python.org/pull_request24537
lukasz.langahttps://bugs.python.org/user12704
msg392781https://bugs.python.org/msg392781
msg392611https://bugs.python.org/msg392611
msg392338https://bugs.python.org/msg392338
pull_request24420https://bugs.python.org/pull_request24420
pull_request24419https://bugs.python.org/pull_request24419
pull_request24418https://bugs.python.org/pull_request24418
miss-islingtonhttps://bugs.python.org/user27838
pull_request24417https://bugs.python.org/pull_request24417
msg392334https://bugs.python.org/msg392334
vstinnerhttps://bugs.python.org/user2377
msg391859https://bugs.python.org/msg391859
patchhttps://bugs.python.org/keyword2
pull_request24315https://bugs.python.org/pull_request24315
msg391426https://bugs.python.org/msg391426
Mike.Lissnerhttps://bugs.python.org/user19977
gregory.p.smithhttps://bugs.python.org/user252
vstinnerhttps://bugs.python.org/user2377
xtreakhttps://bugs.python.org/user28746
msg391352https://bugs.python.org/msg391352
The Python Software Foundationhttps://python.org/psf-landing/
Rounduphttp://roundup.sourceforge.net
Python Software Foundationhttp://python.org/psf
Legal Statementshttp://python.org/about/legal
URLs of crawlers that visited me.