This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author serhiy.storchaka
Recipients arnaudc, benhoyt, ezio.melotti, python-dev, serhiy.storchaka, vstinner
Date 2017-06-21.04:33:30
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <[email protected]>
In-reply-to
Content
While working on this issue I found a way to inject environment variables for a subprocess on Windows. Reclassified this issue as a security issue. PR 2302 fixes this. May be there are other security vulnerabilities fixed by it.
History
Date User Action Args
2017-06-21 04:33:31serhiy.storchakasetrecipients: + serhiy.storchaka, vstinner, ezio.melotti, benhoyt, python-dev, arnaudc
2017-06-21 04:33:30serhiy.storchakasetmessageid: <[email protected]>
2017-06-21 04:33:30serhiy.storchakalinkissue13617 messages
2017-06-21 04:33:30serhiy.storchakacreate