git.ipfire.org Git - thirdparty/Python/cpython.git/commit

]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit

projects / thirdparty / Python / cpython.git / commit

author	Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
	Mon, 13 Apr 2026 01:40:54 +0000 (03:40 +0200)
committer	GitHub <noreply@github.com>
	Mon, 13 Apr 2026 01:40:54 +0000 (01:40 +0000)
commit	6a5f79c8d7bbf22b083b240910c7a8781a59437d
tree	bc7845bbd209ec4af22a754c137f181fdf6e0bb5	tree \| snapshot
parent	48c3c7fb730e447ae1d8d2dec8f4a8b145687567	commit \| diff

[3.14] gh-148395: Fix a possible UAF in `{LZMA,BZ2,_Zlib}Decompressor` (GH-148396) (#148480)

gh-148395: Fix a possible UAF in `{LZMA,BZ2,_Zlib}Decompressor` (GH-148396)

Fix dangling input pointer after `MemoryError` in _lzma/_bz2/_ZlibDecompressor.decompress
(cherry picked from commit 8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2)

Co-authored-by: Stan Ulbrych <stan@python.org>

Misc/NEWS.d/next/Security/2026-04-10-16-28-21.gh-issue-148395.kfzm0G.rst	[new file with mode: 0644]	blob
Modules/_bz2module.c		diff \| blob \| blame \| history
Modules/_lzmamodule.c		diff \| blob \| blame \| history
Modules/zlibmodule.c		diff \| blob \| blame \| history

Mirror of https://github.com/python/cpython.git

RSS Atom