]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.11] gh-130577: tarfile now validates archives to ensure member offsets are non...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Tue, 19 Aug 2025 18:00:46 +0000 (20:00 +0200)
committerGitHub <noreply@github.com>
Tue, 19 Aug 2025 18:00:46 +0000 (19:00 +0100)
commitb4ec17488eedec36d3c05fec127df71c0071f6cb
tree6004fd62cd2ac3398665234178d231177634c9fe
parent3511c2e546aaacda5880eb89a94f4e8514b3ce76
[3.11] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) (#137172)

gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027)
(cherry picked from commit 7040aa54f14676938970e10c5f74ea93cd56aa38)

Co-authored-by: Alexander Urieles <aeurielesn@users.noreply.github.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Lib/tarfile.py
Lib/test/test_tarfile.py
Misc/NEWS.d/next/Library/2025-07-23-00-35-29.gh-issue-130577.c7EITy.rst [new file with mode: 0644]