diff options
| author | Matthew Rollings <1211162+stealthcopter@users.noreply.github.com> | 2019-12-02 22:25:21 (GMT) |
|---|---|---|
| committer | Guido van Rossum <guido@python.org> | 2019-12-02 22:25:21 (GMT) |
| commit | a62ad4730c9b575f140f24074656c0257c86a09a (patch) | |
| tree | 2fe5664ba3d3bf745bda95c2539e4c25e3535380 /Misc | |
| parent | 016b0280b8a97bc26e97c6a8dd5fb8fad5fe72e4 (diff) | |
| download | cpython-a62ad4730c9b575f140f24074656c0257c86a09a.zip cpython-a62ad4730c9b575f140f24074656c0257c86a09a.tar.gz cpython-a62ad4730c9b575f140f24074656c0257c86a09a.tar.bz2 | |
bpo-38945: UU Encoding: Don't let newline in filename corrupt the output format (#17418)
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/NEWS.d/next/Security/2019-12-01-22-44-40.bpo-38945.ztmNXc.rst | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Security/2019-12-01-22-44-40.bpo-38945.ztmNXc.rst b/Misc/NEWS.d/next/Security/2019-12-01-22-44-40.bpo-38945.ztmNXc.rst new file mode 100644 index 0000000..1bf6ed5 --- /dev/null +++ b/Misc/NEWS.d/next/Security/2019-12-01-22-44-40.bpo-38945.ztmNXc.rst @@ -0,0 +1 @@ +Newline characters have been escaped when performing uu encoding to prevent them from overflowing into to content section of the encoded file. This prevents malicious or accidental modification of data during the decoding process.
\ No newline at end of file |