Bug#504359: csound: Python scripts load modules from current directory

2008-11-06 Thread Felipe Sateler
reassign 504359 python-csoundac tags 504359 pending El 02/11/08 22:50 James Vega escribió: > Package: csound > Version: 1:5.08.2~dfsg-1 > Severity: grave > Tags: security patch > Justification: user security hole > Usertags: pythonpath > > csound's python interface calls PySys_SetArgv with an argv

Bug#504359: csound: Python scripts load modules from current directory

2008-11-02 Thread James Vega
Package: csound Version: 1:5.08.2~dfsg-1 Severity: grave Tags: security patch Justification: user security hole Usertags: pythonpath csound's python interface calls PySys_SetArgv with an argv[0] that doesn't resolve to a filename. This causes Python to prepend sys.path with an empty string which,