]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.9] gh-130577: tarfile now validates archives to ensure member offsets are non...
authorVictor Stinner <vstinner@python.org>
Sat, 13 Sep 2025 20:34:15 +0000 (22:34 +0200)
committerGitHub <noreply@github.com>
Sat, 13 Sep 2025 20:34:15 +0000 (22:34 +0200)
commit73f03e4808206f71eb6b92c579505a220942ef19
treeffe89abd26e848bc9ae695e58c2dd7f46e94160b
parent06fc882eac0e59220a7b8b127a1e7babe0055d45
[3.9] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) (GH-137645)

gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027)

(cherry picked from commit 7040aa54f14676938970e10c5f74ea93cd56aa38)

Co-authored-by: Alexander Urieles <aeurielesn@users.noreply.github.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Lib/tarfile.py
Lib/test/test_tarfile.py
Misc/NEWS.d/next/Library/2025-07-23-00-35-29.gh-issue-130577.c7EITy.rst [new file with mode: 0644]