Skip to content
Snippets Groups Projects
Unverified Commit 90620490 authored by Miss Islington (bot)'s avatar Miss Islington (bot) Committed by GitHub
Browse files

[3.8] gh-97612: Fix shell injection in get-remote-certificate.py (GH-97613) (GH-97633)


Fix a shell code injection vulnerability in the
get-remote-certificate.py example script. The script no longer uses a
shell to run "openssl" commands. Issue reported and initial fix by
Caleb Shortt.

Remove the Windows code path to send "quit" on stdin to the "openssl
s_client" command: use DEVNULL on all platforms instead.

Co-authored-by: default avatarCaleb Shortt <caleb@rgauge.com>
(cherry picked from commit 83a0f44f)

Co-authored-by: default avatarVictor Stinner <vstinner@python.org>
parent 246a0446
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment