[issue38945] Remove newline characters from uu encoding methods

[Larry Hastings]

Change by Larry Hastings :


--
resolution:  -> fixed
stage: patch review -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[Larry Hastings]

Larry Hastings  added the comment:


New changeset 8835f465fa94f114dcf865429c0410821d365dae by Ned Deily in branch 
'3.5':
bpo-38945: UU Encoding: Don't let newline in filename corrupt the output format 
(GH-17418) (GH-17444) (#17445)
https://github.com/python/cpython/commit/8835f465fa94f114dcf865429c0410821d365dae


--
nosy: +larry

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[Guido van Rossum]

Guido van Rossum  added the comment:


New changeset a016d4e32cc9faa48105d00db275439c3dc93559 by Guido van Rossum 
(Matthew Rollings) in branch '2.7':
[2.7] bpo-38945: UU Encoding: Don't let newline in filename corrupt the output 
format (GH-17418). (#17452)
https://github.com/python/cpython/commit/a016d4e32cc9faa48105d00db275439c3dc93559


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[stealthcopter]

Change by stealthcopter :


--
pull_requests: +16933
pull_request: https://github.com/python/cpython/pull/17452

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[Ned Deily]

Change by Ned Deily :


--
versions: +Python 3.5

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[Ned Deily]

Change by Ned Deily :


--
pull_requests: +16926
pull_request: https://github.com/python/cpython/pull/17445

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[Ned Deily]

Change by Ned Deily :


--
versions: +Python 2.7, Python 3.6, Python 3.7, Python 3.8, Python 3.9

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[Guido van Rossum]

Guido van Rossum  added the comment:

(Now waiting for 2.7 backport by stealthcopter.)

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[Ned Deily]

Ned Deily  added the comment:


New changeset 30afc91f5e70cf4748ffac77a419ba69ebca6f6a by Ned Deily (Miss 
Islington (bot)) in branch '3.6':
bpo-38945: UU Encoding: Don't let newline in filename corrupt the output format 
(GH-17418) (GH-17444)
https://github.com/python/cpython/commit/30afc91f5e70cf4748ffac77a419ba69ebca6f6a


--
nosy: +ned.deily

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[miss-islington]

miss-islington  added the comment:


New changeset 8859fc629474ab1ca7eb2e67aec538097c327e58 by Miss Islington (bot) 
in branch '3.8':
bpo-38945: UU Encoding: Don't let newline in filename corrupt the output format 
(GH-17418)
https://github.com/python/cpython/commit/8859fc629474ab1ca7eb2e67aec538097c327e58


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[miss-islington]

miss-islington  added the comment:


New changeset 87f2d261ee1c63ed39517355833d087c5a78b4bf by Miss Islington (bot) 
in branch '3.7':
bpo-38945: UU Encoding: Don't let newline in filename corrupt the output format 
(GH-17418)
https://github.com/python/cpython/commit/87f2d261ee1c63ed39517355833d087c5a78b4bf


--
nosy: +miss-islington

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[miss-islington]

Change by miss-islington :


--
pull_requests: +16924
pull_request: https://github.com/python/cpython/pull/17443

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[miss-islington]

Change by miss-islington :


--
pull_requests: +16925
pull_request: https://github.com/python/cpython/pull/17444

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[miss-islington]

Change by miss-islington :


--
keywords: +patch
pull_requests: +16923
stage:  -> patch review
pull_request: https://github.com/python/cpython/pull/17442

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[Guido van Rossum]

Guido van Rossum  added the comment:


New changeset a62ad4730c9b575f140f24074656c0257c86a09a by Guido van Rossum 
(Matthew Rollings) in branch 'master':
bpo-38945: UU Encoding: Don't let newline in filename corrupt the output format 
(#17418)
https://github.com/python/cpython/commit/a62ad4730c9b575f140f24074656c0257c86a09a


--
nosy: +gvanrossum

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue38945] Remove newline characters from uu encoding methods

[stealthcopter]

New submission from stealthcopter :

Filenames passed to the UU encoding methods (uu.py and uu_codec.py) that 
contain a newline character will overflow data into the UU content section. 
This can potentially be used to inject replace or corrupt data content in a 
file during the decode process.

Initially discussed via the PSRT but deemed low risk so suggested I create a PR 
with the changes and a BPO.

--
messages: 357660
nosy: stealthcopter
priority: normal
pull_requests: 16900
severity: normal
status: open
title: Remove newline characters from uu encoding methods
type: security

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com