GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — [3.6] bpo-41944: No longer call eval() on content received via HTTP in the CJK codec tests (GH-22566) by miss-islington · Pull Request #22579 · python/cpython

Conversation

@miss-islington

@miss-islington miss-islington commented Oct 6, 2020 •
edited by bedevere-bot
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

(cherry picked from commit 2ef5caa)

Co-authored-by: Serhiy Storchaka [email protected]

https://bugs.python.org/issue41944

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@serhiy-storchaka @miss-islington
bpo-41944: No longer call eval() on content received via HTTP in the …
7577b2d 
…CJK codec tests (pythonGH-22566)

(cherry picked from commit 2ef5caa)

Co-authored-by: Serhiy Storchaka <[email protected]>
@the-knights-who-say-ni the-knights-who-say-ni added the CLA signed label Oct 6, 2020
@bedevere-bot bedevere-bot mentioned this pull request Oct 6, 2020
bpo-41944: No longer call eval() on content received via HTTP in the CJK codec tests #22566
Merged
@bedevere-bot bedevere-bot added type-security A security issue tests Tests in the Lib/test dir labels Oct 6, 2020
@miss-islington

miss-islington commented Oct 6, 2020

Copy link
Copy Markdown
Contributor Author

@serhiy-storchaka: Status check is done, and it's a success ✅ .
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-bot bedevere-bot added the awaiting review label Oct 6, 2020
vstinner
vstinner approved these changes Oct 6, 2020
View reviewed changes

@vstinner vstinner left a comment

Copy link
Copy Markdown
Member

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, good bot.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@bedevere-bot bedevere-bot added awaiting merge and removed awaiting review labels Oct 6, 2020
@miss-islington

miss-islington commented Oct 6, 2020

Copy link
Copy Markdown
Contributor Author

@serhiy-storchaka: Status check is done, and it's a failure ❌ .
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@vstinner

vstinner commented Oct 6, 2020

Copy link
Copy Markdown
Member

@ned-deily: Would you mind to merge this security fix into 3.6?

Azure Pipelines PR is marked as failed because the macOS job failed (error unrelated to my PR):

##[warning]An image label with the label xcode9-macos10.13 does not exist.
,##[error]The remote provider was unable to process the request.

On master, .azure-pipelines/ci.yml uses vmImage: macos-10.14 instead of vmImage: xcode9-macos10.13.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@vstinner vstinner mentioned this pull request Oct 8, 2020
Please make Travis CI optional again python/core-workflow#377
Closed
@ned-deily
ned-deily merged commit e912e94 into python:3.6 Oct 20, 2020
@bedevere-bot bedevere-bot removed the awaiting merge label Oct 20, 2020
@miss-islington
miss-islington deleted the backport-2ef5caa-3.6 branch October 20, 2020 04:46
gentoo-bot pushed a commit to gentoo/cpython that referenced this pull request Dec 14, 2020
@miss-islington @mgorny
bpo-41944: No longer call eval() on content received via HTTP in the …
6a6c424 
…CJK codec tests (pythonGH-22566) (pythonGH-22579)

(cherry picked from commit 2ef5caa)

Co-authored-by: Serhiy Storchaka <[email protected]>

Rebased for Python 2.7 by Michał Górny <[email protected]>
@serhiy-storchaka serhiy-storchaka mentioned this pull request Apr 10, 2022
[security][CVE-2020-27619] Python testsuite calls eval() on content received via HTTP #86110
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@vstinner vstinner vstinner approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

tests Tests in the Lib/test dir type-security A security issue

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

6 participants

@miss-islington @vstinner @ned-deily @the-knights-who-say-ni @bedevere-bot @serhiy-storchaka
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.