Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

[security] Injecting environment variable in subprocess on Windows #74915

Copy link
Copy link
@serhiy-storchaka

Description

@serhiy-storchaka
Issue body actions
BPO 30730
Nosy @birkenfeld, @pfmoore, @vstinner, @larryhastings, @tjguk, @benjaminp, @ned-deily, @zware, @serhiy-storchaka, @zooba
PRs
  • bpo-30730: Prevent environment variables injection in subprocess on Windows. #2325
  • [3.6] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) #2360
  • [3.5] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) #2361
  • [security][3.4] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) #2362
  • [security][3.3] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) #2363
  • [2.7] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) #2372
  • bpo-30745: Fix compiler warnings introduced in bpo-30730. #2376
  • [3.6] bpo-30745: Fix compiler warnings introduced in bpo-30730. (GH-2376) #2378
  • [3.5] bpo-30745: Fix compiler warnings introduced in bpo-30730. (GH-2376) #2379
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/serhiy-storchaka'
    closed_at = <Date 2017-07-19.05:17:56.399>
    created_at = <Date 2017-06-22.08:07:00.032>
    labels = ['type-security', 'extension-modules', '3.7', 'release-blocker']
    title = '[security] Injecting environment variable in subprocess on Windows'
    updated_at = <Date 2019-05-10.18:17:07.168>
    user = 'https://github.com/serhiy-storchaka'

    bugs.python.org fields:

    activity = <Date 2019-05-10.18:17:07.168>
    actor = 'ned.deily'
    assignee = 'serhiy.storchaka'
    closed = True
    closed_date = <Date 2017-07-19.05:17:56.399>
    closer = 'serhiy.storchaka'
    components = ['Extension Modules']
    creation = <Date 2017-06-22.08:07:00.032>
    creator = 'serhiy.storchaka'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 30730
    keywords = []
    message_count = 23.0
    messages = ['296618', '296725', '296728', '296729', '296753', '296760', '296767', '296769', '296772', '297175', '297449', '297468', '297472', '297936', '298145', '298146', '298147', '298148', '298151', '298218', '298222', '298628', '298865']
    nosy_count = 10.0
    nosy_names = ['georg.brandl', 'paul.moore', 'vstinner', 'larry', 'tim.golden', 'benjamin.peterson', 'ned.deily', 'zach.ware', 'serhiy.storchaka', 'steve.dower']
    pr_nums = ['2325', '2360', '2361', '2362', '2363', '2372', '2376', '2378', '2379']
    priority = 'release blocker'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue30730'
    versions = ['Python 2.7', 'Python 3.3', 'Python 3.4', 'Python 3.5', 'Python 3.6', 'Python 3.7']

    Reactions are currently unavailable

    Metadata

    Metadata

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      Morty Proxy This is a proxified and sanitized view of the page, visit original site.