Repository navigation
[3.13] gh-157190: Fix tarfile data/tar filter bypass via hard link to a symlink - #157192
encukou merged 3 commits into
Conversation
Sorry, something went wrong.
(cherry picked from commit 480ea4a) Co-authored-by: Stan Ulbrych <stan@python.org>
|
🤖 New build scheduled with the buildbot fleet by @encukou for commit f21d8f3 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F157192%2Fmerge If you want to schedule another build, you need to add the 🔨 test-with-buildbots label again. |
Sorry, something went wrong.
|
(This is 3.13 so unrelated Buildbot failures are expected. There shouldn't be any in tarfile though.) |
Sorry, something went wrong.
|
Thanks @StanFromIreland for the PR, and @encukou for merging it 🌮🎉.. I'm working now to backport this PR to: 3.10, 3.11, 3.12. |
Sorry, something went wrong.
|
Sorry, @StanFromIreland and @encukou, I could not cleanly backport this to 3.12 due to a conflict. cherry_picker b8f23e307097552eaea2604383a12ab280520d0d 3.12 |
Sorry, something went wrong.
|
Sorry, @StanFromIreland and @encukou, I could not cleanly backport this to 3.11 due to a conflict. cherry_picker b8f23e307097552eaea2604383a12ab280520d0d 3.11 |
Sorry, something went wrong.
|
Sorry, @StanFromIreland and @encukou, I could not cleanly backport this to 3.10 due to a conflict. cherry_picker b8f23e307097552eaea2604383a12ab280520d0d 3.10 |
Sorry, something went wrong.
|
GH-157454 is a backport of this pull request to the 3.12 branch. |
Sorry, something went wrong.
…k to a symlink (GH-157191) (GH-157192) (#157454) * [3.12] gh-157190: Fix tarfile `data`/`tar` filter bypass via hard link to a symlink (GH-157191) (GH-157192) (cherry picked from commit 480ea4a) The backport to 3.13 and below includes a NEWS entry. (cherry picked from commit b8f23e3) Co-authored-by: Stan Ulbrych <stan@python.org> Co-authored-by: Russell Keith-Magee <russell@keith-magee.com>
(cherry picked from commit 480ea4a)