]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
gh-148395: Fix a possible UAF in `{LZMA,BZ2,_Zlib}Decompressor` (GH-148396)
authorStan Ulbrych <stan@python.org>
Mon, 13 Apr 2026 01:14:54 +0000 (02:14 +0100)
committerGitHub <noreply@github.com>
Mon, 13 Apr 2026 01:14:54 +0000 (18:14 -0700)
commit8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2
tree9fd08140a3a5b2d22ef8cc18ef04c9e0b0779e01
parent480edc1aae0f54e34d217c72eb2962702c82a666
gh-148395: Fix a possible UAF in `{LZMA,BZ2,_Zlib}Decompressor` (GH-148396)

Fix dangling input pointer after `MemoryError` in _lzma/_bz2/_ZlibDecompressor.decompress
Misc/NEWS.d/next/Security/2026-04-10-16-28-21.gh-issue-148395.kfzm0G.rst [new file with mode: 0644]
Modules/_bz2module.c
Modules/_lzmamodule.c
Modules/zlibmodule.c