upstream/ipython Files · IPython/core/release.py

Fix CVE-2023-24816 by removing legacy code....

Fix CVE-2023-24816 by removing legacy code. Remove legacy code that might trigger a CVE. Currently set_term_title is only called with (semi-)trusted input that contain the current working directory of the current IPython session. If an attacker can control directory names, and manage to get a user cd into this directory the attacker can execute arbitrary commands contained in the folder names. Example: - On a windows machine where python is built without _ctypes, create a folder called && echo "pwn" > pwn.txt. This can be done by for example cloning a git repository. - call toggled_set_term_title(True), (or have the preference to true) - Open IPython and cd into this directory. - the folder now contain a pwn.txt, with pwn as content, despite the user not asking for any code execution. Workaround: Set the configuration option c.TerminalInteractiveShell.term_title_format='IPython' (or to any other fixed, safe string).

Matthias Bussonnier - - Load All Authors

File last commit:

r28066:14faa28a


                r28089:991849c2

Download file

             release.py
        
                    54 lines
            
             | 2.1 KiB
            
                | text/x-python
            
             |
                PythonLexer
            
             / IPython / core / release.py
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      # -*- coding: utf-8 -*-

      """Release data for the IPython project."""

      #-----------------------------------------------------------------------------

      #  Copyright (c) 2008, IPython Development Team.

      #  Copyright (c) 2001, Fernando Perez <fernando.perez@colorado.edu>

      #  Copyright (c) 2001, Janko Hauser <jhauser@zscout.de>

      #  Copyright (c) 2001, Nathaniel Gray <n8gray@caltech.edu>

      #

      #  Distributed under the terms of the Modified BSD License.

      #

      #  The full license is in the file COPYING.txt, distributed with this software.

      #-----------------------------------------------------------------------------

      # IPython version information.  An empty _version_extra corresponds to a full

      # release.  'dev' as a _version_extra string means this is a development

      # version

      _version_major = 8

      _version_minor = 10

      _version_patch = 0

      _version_extra = ".dev"

      # _version_extra = "rc1"

      # _version_extra = ""  # Uncomment this for full releases

      # Construct full version string from these.

      _ver = [_version_major, _version_minor, _version_patch]

      __version__ = '.'.join(map(str, _ver))

      if _version_extra:

          __version__ = __version__  + _version_extra

      version = __version__  # backwards compatibility name

      version_info = (_version_major, _version_minor, _version_patch, _version_extra)

      # Change this when incrementing the kernel protocol version

      kernel_protocol_version_info = (5, 0)

      kernel_protocol_version = "%i.%i" % kernel_protocol_version_info

      license = "BSD-3-Clause"

      authors = {'Fernando' : ('Fernando Perez','fperez.net@gmail.com'),

                 'Janko'    : ('Janko Hauser','jhauser@zscout.de'),

                 'Nathan'   : ('Nathaniel Gray','n8gray@caltech.edu'),

                 'Ville'    : ('Ville Vainio','vivainio@gmail.com'),

                 'Brian'    : ('Brian E Granger', 'ellisonbg@gmail.com'),

                 'Min'      : ('Min Ragan-Kelley', 'benjaminrk@gmail.com'),

                 'Thomas'   : ('Thomas A. Kluyver', 'takowl@gmail.com'),

                 'Jorgen'   : ('Jorgen Stenarson', 'jorgen.stenarson@bostream.nu'),

                 'Matthias' : ('Matthias Bussonnier', 'bussonniermatthias@gmail.com'),

                 }

      author = 'The IPython Development Team'

      author_email = 'ipython-dev@python.org'

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				# -- coding: utf-8 --
				"""Release data for the IPython project."""

				#-----------------------------------------------------------------------------
				# Copyright (c) 2008, IPython Development Team.
				# Copyright (c) 2001, Fernando Perez <fernando.perez@colorado.edu>
				# Copyright (c) 2001, Janko Hauser <jhauser@zscout.de>
				# Copyright (c) 2001, Nathaniel Gray <n8gray@caltech.edu>
				#
				# Distributed under the terms of the Modified BSD License.
				#
				# The full license is in the file COPYING.txt, distributed with this software.
				#-----------------------------------------------------------------------------

				# IPython version information. An empty _version_extra corresponds to a full
				# release. 'dev' as a _version_extra string means this is a development
				# version
				_version_major = 8
				_version_minor = 10
				_version_patch = 0
				_version_extra = ".dev"
				# _version_extra = "rc1"
				# _version_extra = "" # Uncomment this for full releases

				# Construct full version string from these.
				_ver = [_version_major, _version_minor, _version_patch]

				__version__ = '.'.join(map(str, _ver))
				if _version_extra:
				__version__ = __version__ + _version_extra

				version = __version__ # backwards compatibility name
				version_info = (_version_major, _version_minor, _version_patch, _version_extra)

				# Change this when incrementing the kernel protocol version
				kernel_protocol_version_info = (5, 0)
				kernel_protocol_version = "%i.%i" % kernel_protocol_version_info

				license = "BSD-3-Clause"

				authors = {'Fernando' : ('Fernando Perez','fperez.net@gmail.com'),
				'Janko' : ('Janko Hauser','jhauser@zscout.de'),
				'Nathan' : ('Nathaniel Gray','n8gray@caltech.edu'),
				'Ville' : ('Ville Vainio','vivainio@gmail.com'),
				'Brian' : ('Brian E Granger', 'ellisonbg@gmail.com'),
				'Min' : ('Min Ragan-Kelley', 'benjaminrk@gmail.com'),
				'Thomas' : ('Thomas A. Kluyver', 'takowl@gmail.com'),
				'Jorgen' : ('Jorgen Stenarson', 'jorgen.stenarson@bostream.nu'),
				'Matthias' : ('Matthias Bussonnier', 'bussonniermatthias@gmail.com'),
				}

				author = 'The IPython Development Team'

				author_email = 'ipython-dev@python.org'