[issue17102] tarfile extract can write files outside the destination path

2018-08-27 Thread Gregory P. Smith
Change by Gregory P. Smith : -- resolution: -> duplicate stage: needs patch -> resolved status: open -> closed superseder: -> tarfile: Traversal attack vulnerability ___ Python tracker

[issue17102] tarfile extract can write files outside the destination path

2018-08-27 Thread Tal Einat
Tal Einat added the comment: I suggest marking this as a duplicate of #21109, which is more general and includes most of the relevant discussion and patches. -- nosy: +taleinat ___ Python tracker

[issue17102] tarfile extract can write files outside the destination path

2018-06-01 Thread Jakub Wilk
Change by Jakub Wilk : -- nosy: +jwilk ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue17102] tarfile extract can write files outside the destination path

2016-09-08 Thread Christian Heimes
Changes by Christian Heimes : -- stage: -> needs patch versions: +Python 3.5, Python 3.6, Python 3.7 -Python 3.2, Python 3.3, Python 3.4 ___ Python tracker

[issue17102] tarfile extract can write files outside the destination path

2013-02-02 Thread R. David Murray
R. David Murray added the comment: Please see issue issue 1044. I have no opinion here, I just remembered that this had been discussed before. -- nosy: +r.david.murray ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue17102

[issue17102] tarfile extract can write files outside the destination path

2013-02-02 Thread Gregory P. Smith
Gregory P. Smith added the comment: given issue 1044, this is not high priority. i still think it'd be useful. -- priority: high - normal ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue17102

[issue17102] tarfile extract can write files outside the destination path

2013-02-02 Thread Arfrever Frehtes Taifersar Arahesis
Changes by Arfrever Frehtes Taifersar Arahesis arfrever@gmail.com: -- nosy: +Arfrever ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue17102 ___

[issue17102] tarfile extract can write files outside the destination path

2013-02-01 Thread Gregory P. Smith
New submission from Gregory P. Smith: Create a malicious .tar file with entries containing absolute or relative paths and the tarfile module happily uses them as is without sanity checking. filed in response to http://bugs.python.org/issue6972 which fixed the zipfile module for this. I'm

[issue17102] tarfile extract can write files outside the destination path

2013-02-01 Thread Ralf Schmitt
Changes by Ralf Schmitt python-b...@systemexit.de: -- nosy: +schmir ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue17102 ___ ___ Python-bugs-list

[issue17102] tarfile extract can write files outside the destination path

2013-02-01 Thread Serhiy Storchaka
Changes by Serhiy Storchaka storch...@gmail.com: -- nosy: +serhiy.storchaka ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue17102 ___ ___