This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author serhiy.storchaka
Recipients arnaudc, benhoyt, ezio.melotti, python-dev, serhiy.storchaka, vstinner
Date 2017-06-21.04:33:30
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1498019610.96.0.689924148428.issue13617@psf.upfronthosting.co.za>
In-reply-to
Content
While working on this issue I found a way to inject environment variables for a subprocess on Windows. Reclassified this issue as a security issue. PR 2302 fixes this. May be there are other security vulnerabilities fixed by it.
History
Date User Action Args
2017-06-21 04:33:31serhiy.storchakasetrecipients: + serhiy.storchaka, vstinner, ezio.melotti, benhoyt, python-dev, arnaudc
2017-06-21 04:33:30serhiy.storchakasetmessageid: <1498019610.96.0.689924148428.issue13617@psf.upfronthosting.co.za>
2017-06-21 04:33:30serhiy.storchakalinkissue13617 messages
2017-06-21 04:33:30serhiy.storchakacreate