[3.8] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) #98192

miss-islington · 2022-10-11T19:54:47Z

(cherry picked from commit b9509ba)

Co-authored-by: Petr Viktorin [email protected]

Issue: [CVE-2015-20107] mailcap.findmatch: document shell command Injection danger in filename parameter #68966

…arams (pythonGH-91993) (cherry picked from commit b9509ba) Co-authored-by: Petr Viktorin <[email protected]>

pythongh-68966: Make mailcap refuse to match unsafe filenames/types/p…

31c2ecd

…arams (pythonGH-91993) (cherry picked from commit b9509ba) Co-authored-by: Petr Viktorin <[email protected]>

miss-islington requested a review from a team as a code owner Oct 11, 2022

bedevere-bot added the awaiting review label Oct 11, 2022

bedevere-bot mentioned this pull request Oct 11, 2022

gh-68966: Make mailcap refuse to match unsafe filenames/types/params #91993

Merged

1 task

Merge branch '3.8' into backport-b9509ba-3.8

0f674e5

ambv merged commit 0a4f650 into python:3.8 Oct 11, 2022
13 checks passed

bedevere-bot removed the awaiting review label Oct 11, 2022

miss-islington deleted the backport-b9509ba-3.8 branch Oct 11, 2022

Sep	OCT	Nov
	27
2021	2022	2023

[3.8] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) #98192

[3.8] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) #98192

Conversation

miss-islington commented Oct 11, 2022 • edited by bedevere-bot

miss-islington commented Oct 11, 2022 •

edited by bedevere-bot