summaryrefslogtreecommitdiffstats
path: root/Misc/NEWS.d
diff options
context:
space:
mode:
authorMatthew Rollings <1211162+stealthcopter@users.noreply.github.com>2019-12-02 22:25:21 (GMT)
committerGuido van Rossum <guido@python.org>2019-12-02 22:25:21 (GMT)
commita62ad4730c9b575f140f24074656c0257c86a09a (patch)
tree2fe5664ba3d3bf745bda95c2539e4c25e3535380 /Misc/NEWS.d
parent016b0280b8a97bc26e97c6a8dd5fb8fad5fe72e4 (diff)
downloadcpython-a62ad4730c9b575f140f24074656c0257c86a09a.zip
cpython-a62ad4730c9b575f140f24074656c0257c86a09a.tar.gz
cpython-a62ad4730c9b575f140f24074656c0257c86a09a.tar.bz2
bpo-38945: UU Encoding: Don't let newline in filename corrupt the output format (#17418)
Diffstat (limited to 'Misc/NEWS.d')
-rw-r--r--Misc/NEWS.d/next/Security/2019-12-01-22-44-40.bpo-38945.ztmNXc.rst1
1 files changed, 1 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Security/2019-12-01-22-44-40.bpo-38945.ztmNXc.rst b/Misc/NEWS.d/next/Security/2019-12-01-22-44-40.bpo-38945.ztmNXc.rst
new file mode 100644
index 0000000..1bf6ed5
--- /dev/null
+++ b/Misc/NEWS.d/next/Security/2019-12-01-22-44-40.bpo-38945.ztmNXc.rst
@@ -0,0 +1 @@
+Newline characters have been escaped when performing uu encoding to prevent them from overflowing into to content section of the encoded file. This prevents malicious or accidental modification of data during the decoding process. \ No newline at end of file