]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.13] gh-130577: tarfile now validates archives to ensure member offsets are non...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Mon, 28 Jul 2025 15:59:33 +0000 (17:59 +0200)
committerGitHub <noreply@github.com>
Mon, 28 Jul 2025 15:59:33 +0000 (15:59 +0000)
commitcdae923ffe187d6ef916c0f665a31249619193fe
tree06228baaabe3f95a6279f192a378d47915329df2
parent3f57d9be8bccf628d20ca24c654bc3d1e1ce2816
[3.13] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) (#137170)

gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027)
(cherry picked from commit 7040aa54f14676938970e10c5f74ea93cd56aa38)

Co-authored-by: Alexander Urieles <aeurielesn@users.noreply.github.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Lib/tarfile.py
Lib/test/test_tarfile.py
Misc/NEWS.d/next/Library/2025-07-23-00-35-29.gh-issue-130577.c7EITy.rst [new file with mode: 0644]