[security] Injecting environment variable in subprocess on Windows · Issue #74915 · python/cpython · GitHub
Skip to content

[security] Injecting environment variable in subprocess on Windows #74915

Description

@serhiy-storchaka
BPO 30730
Nosy @birkenfeld, @pfmoore, @vstinner, @larryhastings, @tjguk, @benjaminp, @ned-deily, @zware, @serhiy-storchaka, @zooba
PRs
  • bpo-30730: Prevent environment variables injection in subprocess on Windows. #2325
  • [3.6] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) #2360
  • [3.5] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) #2361
  • [security][3.4] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) #2362
  • [security][3.3] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) #2363
  • [2.7] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) #2372
  • bpo-30745: Fix compiler warnings introduced in bpo-30730. #2376
  • [3.6] bpo-30745: Fix compiler warnings introduced in bpo-30730. (GH-2376) #2378
  • [3.5] bpo-30745: Fix compiler warnings introduced in bpo-30730. (GH-2376) #2379
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/serhiy-storchaka'
    closed_at = <Date 2017-07-19.05:17:56.399>
    created_at = <Date 2017-06-22.08:07:00.032>
    labels = ['type-security', 'extension-modules', '3.7', 'release-blocker']
    title = '[security] Injecting environment variable in subprocess on Windows'
    updated_at = <Date 2019-05-10.18:17:07.168>
    user = 'https://github.com/serhiy-storchaka'

    bugs.python.org fields:

    activity = <Date 2019-05-10.18:17:07.168>
    actor = 'ned.deily'
    assignee = 'serhiy.storchaka'
    closed = True
    closed_date = <Date 2017-07-19.05:17:56.399>
    closer = 'serhiy.storchaka'
    components = ['Extension Modules']
    creation = <Date 2017-06-22.08:07:00.032>
    creator = 'serhiy.storchaka'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 30730
    keywords = []
    message_count = 23.0
    messages = ['296618', '296725', '296728', '296729', '296753', '296760', '296767', '296769', '296772', '297175', '297449', '297468', '297472', '297936', '298145', '298146', '298147', '298148', '298151', '298218', '298222', '298628', '298865']
    nosy_count = 10.0
    nosy_names = ['georg.brandl', 'paul.moore', 'vstinner', 'larry', 'tim.golden', 'benjamin.peterson', 'ned.deily', 'zach.ware', 'serhiy.storchaka', 'steve.dower']
    pr_nums = ['2325', '2360', '2361', '2362', '2363', '2372', '2376', '2378', '2379']
    priority = 'release blocker'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue30730'
    versions = ['Python 2.7', 'Python 3.3', 'Python 3.4', 'Python 3.5', 'Python 3.6', 'Python 3.7']

    Activity

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Metadata

    Metadata

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions