python
diff --git a/‎Misc/NEWS.d/next/Library/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst
Lines changed: 0 additions & 3 deletions b/‎Misc/NEWS.d/next/Library/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst
Lines changed: 0 additions & 3 deletions
diff --git a/‎Misc/NEWS.d/next/Security/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst
Lines changed: 3 additions & 0 deletions b/‎Misc/NEWS.d/next/Security/2019-02-13-17-21-10.bpo-35907.ckk2zg.rst
Lines changed: 3 additions & 0 deletions
@@ -0,0 +1,3 @@
+CVE-2019-9948: Avoid file reading by disallowing ``local-file://`` and
+``local_file://`` URL schemes in :func:`urllib.urlopen`,
+:meth:`urllib.URLopener.open` and :meth:`urllib.URLopener.retrieve`.
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	+CVE-2019-9948: Avoid file reading by disallowing ``local-file://`` and
	`2`	+``local_file://`` URL schemes in :func:`urllib.urlopen`,
	`3`	+:meth:`urllib.URLopener.open` and :meth:`urllib.URLopener.retrieve`.