[3.11] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027)#137172
Conversation
…ets are non-negative (pythonGH-137027) (cherry picked from commit 7040aa5) Co-authored-by: Alexander Urieles <aeurielesn@users.noreply.github.com> Co-authored-by: Gregory P. Smith <greg@krypto.org>
|
Howdy! Wondering if there's any ETA on this high CVE fix getting rolled out? Thank you! CC: @pablogsal |
github-project-automation
bot
moved this from Todo
to Done
in Release and Deferred blockers 🚫
We can coordinate a release with the rest of the RM team. Will check with them soon |
Happy Monday! Any luck on the 3.11 release for this CVE @pablogsal? 🙇 |
We will probably coordinate to do a release of all supported versions around or after the core dev sprint (mid September) but still not confirmed. CC @ambv @Yhg1s |
|
Hey @pablogsal, as we are nearing the end of September I wanted to check if you have an idea of when we might get the next 3.11 release. Thanks! |
8 participants
(cherry picked from commit 7040aa5)
Co-authored-by: Alexander Urieles aeurielesn@users.noreply.github.com
Co-authored-by: Gregory P. Smith greg@krypto.org
tarfile.StreamError: seeking backwards is not alloweddue to unskipped block with bad checksum #130577