From: Martin Panter <vadmium+py@gmail.com>
Date: Tue, 14 Jun 2016 02:59:21 +0000 (+0000)
Subject: Issue #22636: Merge ctypes.util shell injection fixes from 3.5
X-Git-Tag: v3.6.0a3~169
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1db314bd5cece19490b8770461c03dc43c43907b;p=thirdparty%2FPython%2Fcpython.git

Issue #22636: Merge ctypes.util shell injection fixes from 3.5
---

1db314bd5cece19490b8770461c03dc43c43907b
diff --cc Misc/NEWS
index c59b3adf01b7,14fd2472131c..df29fb26ce8b
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@@ -2,14 -2,20 +2,17 @@@
  Python News
  +++++++++++
  
 -What's New in Python 3.5.3 release candidate 1?
 -===============================================
 -
 -Release date: TBA
 +What's New in Python 3.6.0 alpha 3
 +==================================
  
 -Core and Builtins
 ------------------
 +*Release date: XXXX-XX-XX*
  
  Library
 --------
 ++++++++
  
+ - Issue #22636: Avoid shell injection problems with
+   ctypes.util.find_library().
+ 
  - Issue #16182: Fix various functions in the "readline" module to use the
    locale encoding, and fix get_begidx() and get_endidx() to return code point
    indexes.