git.ipfire.org Git - thirdparty/Python/cpython.git/commit

]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit

projects / thirdparty / Python / cpython.git / commit

author	T. Wouters <thomas@python.org>
	Tue, 3 Jun 2025 17:02:50 +0000 (19:02 +0200)
committer	GitHub <noreply@github.com>
	Tue, 3 Jun 2025 17:02:50 +0000 (19:02 +0200)
commit	dd8f187d0746da151e0025c51680979ac5b4cfb1
tree	f757f78dfd5696d88f7caa7944381d57f3f07226	tree \| snapshot
parent	24eaf53bc6e39fde6ad36b036768dc7d5c144d47	commit \| diff

[3.9] gh-135034: Normalize link targets in tarfile, add `os.path.realpath(strict='allow_missing')` (GH-135037) (GH-135084)

Addresses CVEs 2024-12718, 2025-4138, 2025-4330, and 2025-4517.
(cherry picked from commit 3612d8f51741b11f36f8fb0494d79086bac9390a)

Co-authored-by: Łukasz Langa <lukasz@langa.pl>
Co-authored-by: Petr Viktorin <encukou@gmail.com>
Co-authored-by: Seth Michael Larson <seth@python.org>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

Doc/library/os.path.rst		diff \| blob \| blame \| history
Doc/library/tarfile.rst		diff \| blob \| blame \| history
Doc/whatsnew/3.9.rst		diff \| blob \| blame \| history
Lib/genericpath.py		diff \| blob \| blame \| history
Lib/ntpath.py		diff \| blob \| blame \| history
Lib/posixpath.py		diff \| blob \| blame \| history
Lib/tarfile.py		diff \| blob \| blame \| history
Lib/test/test_ntpath.py		diff \| blob \| blame \| history
Lib/test/test_posixpath.py		diff \| blob \| blame \| history
Lib/test/test_tarfile.py		diff \| blob \| blame \| history
Misc/NEWS.d/next/Security/2025-06-02-11-32-23.gh-issue-135034.RLGjbp.rst	[new file with mode: 0644]	blob

Mirror of https://github.com/python/cpython.git

RSS Atom