Description

encukou

opened on Mar 23, 2023

Issue body actions

This issue tracks implementation of PEP 706 – Filter for tarfile.extractall

• Fix WASI tests (or at least understand and document the symlink behavior)

Linked PRs

• gh-102950: Implement PEP 706 – Filter for tarfile.extractall #102953
• [3.11] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) #103832
• [3.10] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) #104128
• [3.10] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) #104327
• [3.9] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) #104382
• [3.8] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) #104548
• [3.7] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953)  #104583

Unofficial backport

• 3.6 backport for tarfile filters encukou/cpython#26

Activity

1. encukou

   added

   type-featureA feature request or enhancementA feature request or enhancement

   on Mar 23, 2023
2. encukou

   added 6 commits that reference this issue on Apr 24, 2023

   gh-102950: Implement PEP 706 – Filter for tarfile.extractall (#102953)

   af53046

   pythongh-102950: Adjust tests for systems that don't set the sticky bit

   4ff2481

   gh-102950: Adjust tarfile filter tests for systems that don't set the…

   c8c3956

   pythongh-102950: Implement PEP 706 – Filter for tarfile.extractall (p…

   b52ad18

   pythongh-102950: Adjust tarfile filter tests for systems that don't s…

   ee503ad

   [3.11] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (G…

   241f2e5
3. gpshead

   assigned

   encukou

   on May 2, 2023
4. gpshead

   added

   type-securityA security issueA security issue

   on May 2, 2023
5. mcepl commented on May 3, 2023

   

   mcepl

   on May 3, 2023

   Contributor

   More actions

   And I really think #73974 (CVE-2007-4559) should be mentioned somewhere in this PR.
6. mcepl

   added a commit that references this issue on May 3, 2023

   pythongh-102950: Adjust tarfile filter tests for systems that don't s…

   ae62b3a
7. encukou commented on May 3, 2023

   

   encukou

   on May 3, 2023

   MemberAuthor

   More actions

   Well, the PR was open for a month, but now it's closed. Feel free to suggest an update to the docs.
   Note that Python 3.12 doesn't “fix” CVE-2007-4559 (depending on how you define “fix”).
8. encukou

   added 3 commits that reference this issue on May 10, 2023

   [3.10] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (G…

   425065b

   pythongh-102950: Adjust tarfile filter tests for systems that don't s…

   15a108e

   pythongh-102950: Adjust tarfile filter tests for systems that don't s…

   da07840
9. 34 remaining items
10. stratakis

    added a commit that references this issue on Mar 25, 2024

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    6a2cc1b
11. hroncok

    added a commit that references this issue on Mar 26, 2024

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    0f9ad4a
12. mcepl

    added 2 commits that reference this issue on Mar 28, 2024

    pythongh-102950: Adjust tarfile filter tests for systems that don't s…

    ee1fab9

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    eb20acf
13. icanhasmath

    added a commit that references this issue on Jul 19, 2024

    CVE-2007-4559 Apply fixes pythongh-102950 from community for Python 3.7

    This issue will close once commit b762448 is merged into the '2.7' branch.

    b762448
14. hrnciar

    added a commit that references this issue on Apr 23, 2025

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    7b25c48
15. rickprice

    added 5 commits that reference this issue on May 7, 2025

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit 9b27013 is merged into the '2.7' branch.

    9b27013

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit 0816c44 is merged into the '2.7' branch.

    0816c44

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit 62cc9e9 is merged into the '2.7' branch.

    62cc9e9

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit faf4c7c is merged into the '2.7' branch.

    faf4c7c

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit 73b95bc is merged into the '2.7' branch.

    73b95bc
16. icanhasmath

    added a commit that references this issue on May 14, 2025

    CVE-2007-4559 Apply Fixes pythongh-102950 from community fixes

    This issue will close once commit 2bfd598 is merged into the '2.7' branch.

    2bfd598
17. hroncok

    added a commit that references this issue on Jul 4, 2025

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    386fac0
18. frenzymadness

    added a commit that references this issue on Aug 12, 2025

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    b093c90
19. hroncok

    added a commit that references this issue on Feb 3, 2026

    00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

    4d4ea62

Issue actions