Re: [Python-Dev] tarfile and directory traversal vulnerability

2007-08-27 Thread Lars Gustäbel
On Mon, Aug 27, 2007 at 07:40:36PM +0200, Jan Matejek wrote: Lars Gustäbel wrote: Suppose we have: foo - /etc foo/passwd If creation of the foo symlink is delayed, foo/passwd will be extracted in a directory foo which will be created implicitly. If we create the foo symlink

Re: [Python-Dev] tarfile and directory traversal vulnerability

2007-08-25 Thread Lars Gustäbel
throw exception when it encounters such file, and have a special option to extract such files anyway. [...] Yes, I think that is the right way to do it. -- Lars Gustäbel [EMAIL PROTECTED] A chicken is an egg's way of producing more eggs. (Anonymous

Re: [Python-Dev] 2.5 branch unfrozen

2007-04-21 Thread Lars Gustäbel
On Sat, Apr 21, 2007 at 04:45:37PM +1000, Anthony Baxter wrote: Ok, things seem to be OK. So the release25-maint branch is unfrozen. Go crazy. Well, a little bit crazy. I'm afraid that I went crazy a little too early. Sorry for that. Won't happen again. -- Lars Gustäbel [EMAIL PROTECTED

[Python-Dev] Request for developer privileges.

2006-12-20 Thread Lars Gustäbel
Hello, my name is Lars Gustäbel (SF gustaebel). I contributed tarfile.py to the Python standard library in January 2003 and have been the maintainer since then. I have provided about 25 patches over the years, most of them fixes, some of them new features and improvements. As a result, I am