Skip to content

tarfile missing cross-directory checking #89333

@xiongpanju

Description

@xiongpanju
BPO 45170
Nosy @ericvsmith, @vadmium
Superseder
  • bpo-21109: tarfile: Traversal attack vulnerability
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = <Date 2021-09-20.06:34:12.453>
    created_at = <Date 2021-09-11.07:45:41.764>
    labels = ['type-security', '3.8', 'library']
    title = 'tarfile missing cross-directory checking'
    updated_at = <Date 2021-09-20.06:34:12.447>
    user = 'https://bugs.python.org/xiongpanju'

    bugs.python.org fields:

    activity = <Date 2021-09-20.06:34:12.447>
    actor = 'martin.panter'
    assignee = 'none'
    closed = True
    closed_date = <Date 2021-09-20.06:34:12.453>
    closer = 'martin.panter'
    components = ['Library (Lib)']
    creation = <Date 2021-09-11.07:45:41.764>
    creator = 'xiongpanju'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 45170
    keywords = []
    message_count = 3.0
    messages = ['401631', '401643', '402194']
    nosy_count = 3.0
    nosy_names = ['eric.smith', 'martin.panter', 'xiongpanju']
    pr_nums = []
    priority = 'normal'
    resolution = 'duplicate'
    stage = 'resolved'
    status = 'closed'
    superseder = '21109'
    type = 'security'
    url = 'https://bugs.python.org/issue45170'
    versions = ['Python 3.8']

    Metadata

    Metadata

    Assignees

    No one assigned

      Labels

      3.8 (EOL)end of lifestdlibStandard Library Python modules in the Lib/ directorytype-securityA security issue
      No fields configured for issues without a type.

      Projects

      No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions