webbrowser: %action substitution can bypass the dash-prefix check #148169
Description
PR coming shortly.
Linked PRs
- gh-148169: Fix webbrowser
%actionsubstitution bypass of dash-prefix check #148170 - [3.13] gh-148169: Fix webbrowser
%actionsubstitution bypass of dash-prefix check (GH-148170) #148517 - [3.14] gh-148169: Fix webbrowser
%actionsubstitution bypass of dash-prefix check (GH-148170) #148516 - [3.12] gh-148169: Fix webbrowser
%actionsubstitution bypass of dash-prefix check (GH-148170) #148519 - [3.11] gh-148169: Fix webbrowser
%actionsubstitution bypass of dash-prefix check (GH-148170) #148520 - [3.10] gh-148169: Fix webbrowser
%actionsubstitution bypass of dash-prefix check (GH-148170) #148521
Activity
[3.11] gh-148169: Fix webbrowser `%action` substitution bypass of das…
[3.10] gh-148169: Fix webbrowser `%action` substitution bypass of das…
pythongh-148169: Fix webbrowser `%action` substitution bypass of dash…
Update python315 to version 3.15.0~a8 / rev 12 via SR 1349644
Update python310 to version 3.10.20 / rev 77 via SR 1349663
[3.14] gh-148169: Fix webbrowser `%action` substitution bypass of das…
[3.13] gh-148169: Fix webbrowser `%action` substitution bypass of das…
Update python315 to version 3.15.0~a8 / rev 13 via SR 1349863
Update python313 to version 3.13.13 / rev 41 via SR 1349656
Update python312 to version 3.12.13 / rev 49 via SR 1360565
[3.12] gh-148169: Fix webbrowser `%action` substitution bypass of das…
package/python3: security bump to v3.12.14
(CVE-2026-4786) Fix webbrowser `%action` substitution bypass of dash-…
(CVE-2026-4786) Fix webbrowser `%action` substitution bypass of dash-…
(CVE-2026-4786) Fix webbrowser `%action` substitution bypass of dash-…
(CVE-2026-4786) Fix webbrowser `%action` substitution bypass of dash-…
(CVE-2026-4786) Fix webbrowser `%action` substitution bypass of dash-…
(CVE-2026-4786) Fix webbrowser `%action` substitution bypass of dash-…