Message357660
Filenames passed to the UU encoding methods (uu.py and uu_codec.py) that contain a newline character will overflow data into the UU content section. This can potentially be used to inject replace or corrupt data content in a file during the decode process.
Initially discussed via the PSRT but deemed low risk so suggested I create a PR with the changes and a BPO. |
|
Date |
User |
Action |
Args |
2019-11-30 17:06:01 | stealthcopter | set | recipients:
+ stealthcopter |
2019-11-30 17:06:01 | stealthcopter | set | messageid: <1575133561.73.0.538278905149.issue38945@roundup.psfhosted.org> |
2019-11-30 17:06:01 | stealthcopter | link | issue38945 messages |
2019-11-30 17:06:01 | stealthcopter | create | |
|