[issue32367] [Security] CVE-2017-17522: webbrowser.py in Python does not validate strings

2018-08-17 Thread Michał Radwański 

Change by Michał Radwański :


--
pull_requests: +8277

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue32367] [Security] CVE-2017-17522: webbrowser.py in Python does not validate strings

2018-03-13 Thread Ned Deily 

Ned Deily  added the comment:

And Red Hat has already closed their version of this as NOTABUG:
 
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-17522

It seems nearly everyone is agreement that this is not a security issue.

--
resolution:  -> not a bug
stage:  -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue32367] [Security] CVE-2017-17522: webbrowser.py in Python does not validate strings

2018-03-10 Thread Ned Deily 

Ned Deily  added the comment:

Update: https://security-tracker.debian.org/tracker/CVE-2017-17522

"** DISPUTED [...] NOTE: a software maintainer indicates that exploitation is 
impossible because the code relies on subprocess.Popen and the default 
shell=False setting."

--
nosy: +ned.deily

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue32367] [Security] CVE-2017-17522: webbrowser.py in Python does not validate strings

2017-12-19 Thread Antoine Pitrou 

Change by Antoine Pitrou :


--
priority: normal -> high

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue32367] [Security] CVE-2017-17522: webbrowser.py in Python does not validate strings

2017-12-19 Thread STINNER Victor 

Change by STINNER Victor :


--
nosy: +martin.panter

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue32367] [Security] CVE-2017-17522: webbrowser.py in Python does not validate strings

2017-12-18 Thread Charalampos Stratakis 

Change by Charalampos Stratakis :


--
nosy: +cstratak

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue32367] [Security] CVE-2017-17522: webbrowser.py in Python does not validate strings

2017-12-18 Thread STINNER Victor 

STINNER Victor  added the comment:

Red Hat: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-17522
Ubuntu: 
https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-17522.html
SUSE: https://bugzilla.novell.com/show_bug.cgi?id=CVE-2017-17522

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue32367] [Security] CVE-2017-17522: webbrowser.py in Python does not validate strings

2017-12-18 Thread STINNER Victor 

Change by STINNER Victor :


--
title: CVE-2017-17522: webbrowser.py in Python does not validate strings -> 
[Security] CVE-2017-17522: webbrowser.py in Python does not validate strings

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com