]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7f0dc59) | patch
[3.11] gh-151558: Fix symlink escape via `tarfile` hardlink-extraction fallback ...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sat, 27 Jun 2026 17:32:31 +0000 (19:32 +0200)
committerGitHub <noreply@github.com>
Sat, 27 Jun 2026 17:32:31 +0000 (19:32 +0200)
commitbe13e86f6b9788a6f4d0419dffef72cbae5865c9
tree1f5e3b2600571666e139ab417964b3147a85e289tree | snapshot
parent7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21commit | diff
[3.11] gh-151558: Fix symlink escape via `tarfile` hardlink-extraction fallback (GH-151559) (#152001)

* gh-151558: Fix symlink escape via `tarfile` hardlink-extraction fallback (GH-151559)
(cherry picked from commit 27dd970bf6b17ebca7c8ed486a40ab043ed7af8f)

Co-authored-by: Stan Ulbrych <stan@python.org>
* Can't use `:cve:` on 3.11

---------

Co-authored-by: Stan Ulbrych <stan@python.org>
Lib/tarfile.py diff | blob | blame | history
Lib/test/test_tarfile.py diff | blob | blame | history
Misc/NEWS.d/next/Security/2026-06-10-13-08-19.gh-issue-151558.mL74i2.rst [new file with mode: 0644] blob
Mirror of https://github.com/python/cpython.git