Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2007-4559 Patch #1990

Merged
merged 2 commits into from
May 29, 2024
Merged

CVE-2007-4559 Patch #1990

merged 2 commits into from
May 29, 2024

Commits on May 28, 2024

  1. Adding tarfile member sanitization to extractall()

    @TrellixVulnTeam @jamesls
    TrellixVulnTeam authored and jamesls committed May 28, 2024
    Configuration menu
    Copy the full SHA
    2f6e51e View commit details
    Browse the repository at this point in the history

  2. Update tar validation to also check for abspath and symlinks 

    This takes the original PR and adds checks for symlink and absolute
paths.  This brings it more in line with the `data` arg for Python
3.12's `filter` arg does.
    @jamesls
    jamesls committed May 28, 2024
    Configuration menu
    Copy the full SHA
    09ec745 View commit details
    Browse the repository at this point in the history