Re: [Python-Dev] CVE-2008-5983 "untrusted python modules search path"

2009-05-12 Thread jek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Antoine Pitrou napsal(a): > Hello, > > I don't think it has already posted to the list, apologies if it has. > > Some Linux tools and vendors have been hit by an alleged "security hole" where > an embedded Python interpreter will prepend the curren

[Python-Dev] CVE-2008-5983 "untrusted python modules search path"

2009-05-02 Thread Antoine Pitrou
Hello, I don't think it has already posted to the list, apologies if it has. Some Linux tools and vendors have been hit by an alleged "security hole" where an embedded Python interpreter will prepend the current working directory to sys.path as soon as PySys_SetArgv() is called by the embedding