[CVE-2020-15523] _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath · Issue #73964 · python/cpython · GitHub
Skip to content

[CVE-2020-15523] _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath #73964

Description

@TiborCsonka
BPO 29778
Nosy @pfmoore, @vstinner, @larryhastings, @tjguk, @ned-deily, @ambv, @zware, @eryksun, @zooba, @miss-islington, @anthonywee
PRs
  • bpo-29778: Fix incorrect NULL check #17818
  • [3.8] bpo-29778: Fix incorrect NULL check in _PyPathConfig_InitDLLPath() (GH-17818) #17871
  • bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded #21297
  • [3.7] bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded (GH-21297) #21298
  • bpo-29778: test_embed tests the path configuration #21306
  • [3.9] bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded (GH-21297) #21351
  • [3.8] bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded (GH-21297) #21352
  • [3.6] bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded (GH-21298) #21354
  • [3.5] bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded (GH-21297) #21377
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/zooba'
    closed_at = <Date 2020-07-06.18:57:21.099>
    created_at = <Date 2017-03-10.04:58:18.536>
    labels = ['type-security', '3.8', '3.9', '3.10', 'release-blocker', '3.7', 'OS-windows']
    title = '[CVE-2020-15523] _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath'
    updated_at = <Date 2020-08-04.02:16:28.217>
    user = 'https://bugs.python.org/TiborCsonka'

    bugs.python.org fields:

    activity = <Date 2020-08-04.02:16:28.217>
    actor = 'larry'
    assignee = 'steve.dower'
    closed = True
    closed_date = <Date 2020-07-06.18:57:21.099>
    closer = 'steve.dower'
    components = ['Windows']
    creation = <Date 2017-03-10.04:58:18.536>
    creator = 'Tibor Csonka'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 29778
    keywords = ['patch']
    message_count = 37.0
    messages = ['289334', '289364', '289412', '343638', '359136', '359245', '359438', '359439', '359440', '359441', '359498', '359544', '359549', '359550', '372555', '372556', '372595', '372596', '372961', '373138', '373142', '373147', '373150', '373155', '373156', '373164', '373213', '373214', '373228', '373257', '373618', '373757', '373789', '373919', '374024', '374029', '374785']
    nosy_count = 12.0
    nosy_names = ['paul.moore', 'vstinner', 'larry', 'tim.golden', 'ned.deily', 'lukasz.langa', 'zach.ware', 'eryksun', 'steve.dower', 'Tibor Csonka', 'miss-islington', 'anthonywee']
    pr_nums = ['17818', '17871', '21297', '21298', '21306', '21351', '21352', '21354', '21377']
    priority = 'release blocker'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue29778'
    versions = ['Python 3.5', 'Python 3.6', 'Python 3.7', 'Python 3.8', 'Python 3.9', 'Python 3.10']

    Activity

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Metadata

    Metadata

    Assignees

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions