[issue35971] Documentation should warn about code injection from current working directory

2019-02-11 Thread Gabriel Corona
New submission from Gabriel Corona : The CLI tools shipped in Debian python-rdflib-tools package can load modules from the current directory [1]: $ echo 'print("Something")' > cgi.py $ rdf2dot INFO:rdflib:RDFLib Version: 4.2.2 Something Reading from

[issue18747] Re-seed OpenSSL's PRNG after fork

2019-01-04 Thread Gabriel Corona
Gabriel Corona added the comment: Now that the default PRNG of the 'random' package is automatically reseeded at fork, wouldn't it make sense to reseed the OpenSSL seed as well? (At the same time the OpenSSL wiki states [1] that "The situation has changed greatly, starting with Op