[3.13] gh-157190: Fix tarfile `data`/`tar` filter bypass via hard link to a symlink by StanFromIreland · Pull Request #157192 · python/cpython · GitHub

github.com

Tin mới

StanFromIreland:backport-480ea4a-3.13

GitHub CopilotWrite better code with AI

GitHub Copilot appDirect agents from issue to merge

ActionsAutomate any workflow

CodespacesInstant dev environments

IssuesPlan and track work

Code ReviewManage code changes

Code QualityEnforce quality at merge

GitHub Advanced SecurityFind and fix vulnerabilities

Code securitySecure your code as you build

Secret protectionStop leaks before they start

View all use cases

Financial services

View all industries

Software Development

GitHub SponsorsFund open source developers

Copilot for BusinessEnterprise-grade AI features

Premium SupportEnterprise-grade 24/7 support

Pull requests 2.6k

Security and quality 0

tarfile data/tar filter bypass via hard link to a symlink #157190

[3.13] Fix symlink escape via tarfile hard link to symlink

Update news entry with issue number.

awaiting core review

skip_unless_hardlink for Android/Emscriptem.

🔨 test-with-buildbots