This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author serhiy.storchaka
Recipients arnaudc, benhoyt, ezio.melotti, python-dev, serhiy.storchaka, vstinner
Date 2017-06-21.04:33:30
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <>
While working on this issue I found a way to inject environment variables for a subprocess on Windows. Reclassified this issue as a security issue. PR 2302 fixes this. May be there are other security vulnerabilities fixed by it.
Date User Action Args
2017-06-21 04:33:31serhiy.storchakasetrecipients: + serhiy.storchaka, vstinner, ezio.melotti, benhoyt, python-dev, arnaudc
2017-06-21 04:33:30serhiy.storchakasetmessageid: <>
2017-06-21 04:33:30serhiy.storchakalinkissue13617 messages
2017-06-21 04:33:30serhiy.storchakacreate