]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.12] gh-130577: tarfile now validates archives to ensure member offsets are non...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Mon, 4 Aug 2025 11:45:06 +0000 (13:45 +0200)
committerGitHub <noreply@github.com>
Mon, 4 Aug 2025 11:45:06 +0000 (13:45 +0200)
commitc9d9f78feb1467e73fd29356c040bde1c104f29f
tree368a253a02dff8d4e56f3e30170549c168a5acdb
parentf66c75f11d3aeeb614600251fd5d3fe1a34b5ff1
[3.12] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) (#137171)

(cherry picked from commit 7040aa54f14676938970e10c5f74ea93cd56aa38)

Co-authored-by: Alexander Urieles <aeurielesn@users.noreply.github.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Lib/tarfile.py
Lib/test/test_tarfile.py
Misc/NEWS.d/next/Library/2025-07-23-00-35-29.gh-issue-130577.c7EITy.rst [new file with mode: 0644]