]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.10] gh-130577: tarfile now validates archives to ensure member offsets are non...
authorVictor Stinner <vstinner@python.org>
Tue, 2 Sep 2025 18:20:27 +0000 (20:20 +0200)
committerGitHub <noreply@github.com>
Tue, 2 Sep 2025 18:20:27 +0000 (19:20 +0100)
commit57f5981d6260ed21266e0c26951b8564cc252bc2
tree0e2a439ec77590df7a8afa9de46d3407afe6a175
parent1df5d0014578be7fe7ae25e2cc60c50c8b5cc0f7
[3.10] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) (#137644)

gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027)

(cherry picked from commit 7040aa54f14676938970e10c5f74ea93cd56aa38)

Co-authored-by: Alexander Urieles <aeurielesn@users.noreply.github.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Lib/tarfile.py
Lib/test/test_tarfile.py
Misc/NEWS.d/next/Library/2025-07-23-00-35-29.gh-issue-130577.c7EITy.rst [new file with mode: 0644]