Sławomir Nizio added the comment:
I had the same problem with entries:
SCHILY.xattr.system.posix_acl_default, SCHILY.xattr.system.posix_acl_access
in a tarball with pax header.
This seems to be fixed for Python 3 in the issue 8633, commit 1465cc2 in
cpython.
Tarfile from Python 2 assumes
New submission from Sławomir Nizio <poczta...@gazeta.pl>:
This may lead to e.g. DoS or data leak.
When an exception occurs, the Python interpreter displays the stack trace:
$ python3 a.py
Traceback (most recent call last):
File "a.py", line 2, in
print(1/0)
ZeroDivisio