[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: rdflib: URLInputSource can be abused to retrieve arbitrary documents if used naïvely



Control: tags -1 help

Hi all,

Apparently, help is needed from upstream rdflib development team
on the critical security bug #1023399[0] and their respective
entry on their bug tracker[1].  I tried to have a look some time
ago, but didn't make sense of the issue.  I tag the bug
appropriately to raise awareness, in case someone were to have
an idea for a proper patch.

[0]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012482
[1]: https://github.com/RDFLib/rdflib/issues/1844

In hope this helps indeed,
-- 
Étienne Mollier <emollier@emlwks999.eu>
Fingerprint:  8f91 b227 c7d6 f2b1 948c  8236 793c f67e 8f0d 11da
Sent from /dev/pts/3, please excuse my verbosity.
On air: OSI - Set The Controls For The Heart Of The Sun

Attachment: signature.asc
Description: PGP signature


Reply to: