[issue17102] tarfile extract can write files outside the destination path

2018-08-27 Thread Gregory P. Smith
Change by Gregory P. Smith : -- resolution: -> duplicate stage: needs patch -> resolved status: open -> closed superseder: -> tarfile: Traversal attack vulnerability ___ Python tracker _

[issue17102] tarfile extract can write files outside the destination path

2018-08-27 Thread Tal Einat
Tal Einat added the comment: I suggest marking this as a duplicate of #21109, which is more general and includes most of the relevant discussion and patches. -- nosy: +taleinat ___ Python tracker __

[issue17102] tarfile extract can write files outside the destination path

2018-06-01 Thread Jakub Wilk
Change by Jakub Wilk : -- nosy: +jwilk ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.or

[issue17102] tarfile extract can write files outside the destination path

2016-09-08 Thread Christian Heimes
Changes by Christian Heimes : -- stage: -> needs patch versions: +Python 3.5, Python 3.6, Python 3.7 -Python 3.2, Python 3.3, Python 3.4 ___ Python tracker ___

[issue17102] tarfile extract can write files outside the destination path

2013-02-02 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis : -- nosy: +Arfrever ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscri

[issue17102] tarfile extract can write files outside the destination path

2013-02-02 Thread Gregory P. Smith
Gregory P. Smith added the comment: given issue 1044, this is not high priority. i still think it'd be useful. -- priority: high -> normal ___ Python tracker ___ ___

[issue17102] tarfile extract can write files outside the destination path

2013-02-02 Thread R. David Murray
R. David Murray added the comment: Please see issue issue 1044. I have no opinion here, I just remembered that this had been discussed before. -- nosy: +r.david.murray ___ Python tracker _

[issue17102] tarfile extract can write files outside the destination path

2013-02-01 Thread Serhiy Storchaka
Changes by Serhiy Storchaka : -- nosy: +serhiy.storchaka ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http:/

[issue17102] tarfile extract can write files outside the destination path

2013-02-01 Thread Ralf Schmitt
Changes by Ralf Schmitt : -- nosy: +schmir ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.o

[issue17102] tarfile extract can write files outside the destination path

2013-02-01 Thread Gregory P. Smith
New submission from Gregory P. Smith: Create a malicious .tar file with entries containing absolute or relative paths and the tarfile module happily uses them as is without sanity checking. filed in response to http://bugs.python.org/issue6972 which fixed the zipfile module for this. I'm atta