Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[3.5] bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) #21489

Merged
merged 1 commit into from Jul 16, 2020
Merged

[3.5] bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) #21489

merged 1 commit into from Jul 16, 2020

Conversation

encukou
Copy link
Member

@encukou encukou commented Jul 15, 2020 •
edited by bedevere-bot

Avoid infinite loop when reading specially crafted TAR files using the tarfile module
(CVE-2019-20907).
(cherry picked from commit 5a8d121)

Co-authored-by: Rishi rishi_devan@mail.com

https://bugs.python.org/issue39017

@rishi93 @encukou
[3.5] bpo-39017: Avoid infinite loop in the tarfile module (GH-21454)
bde4372 
Avoid infinite loop when reading specially crafted TAR files using the tarfile module
(CVE-2019-20907).
(cherry picked from commit 5a8d121)

Co-authored-by: Rishi <rishi_devan@mail.com>
@encukou encukou requested a review from larryhastings Jul 15, 2020
@encukou encukou closed this Jul 16, 2020
@encukou encukou reopened this Jul 16, 2020
@larryhastings larryhastings merged commit cac9ca8 into 3.5 Jul 16, 2020
4 checks passed
@larryhastings larryhastings deleted the backport-5a8d121-3.5 branch Jul 16, 2020
@bedevere-bot
Copy link

@bedevere-bot bedevere-bot commented Jul 16, 2020

@larryhastings: Please replace # with GH- in the commit message next time. Thanks!

@larryhastings
Copy link
Contributor

@larryhastings larryhastings commented Jul 16, 2020

Thanks for the backport!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@larryhastings larryhastings

Assignees
No one assigned
Labels
CLA signed
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
5 participants
@encukou @bedevere-bot @larryhastings @the-knights-who-say-ni @rishi93