GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — `tarfile.tar_filter` doesn't handle symlinks with empty names · Issue #160097 · python/cpython

tarfile.tar_filter doesn't handle symlinks with empty names #160097

New issue
Copy link
New issue
Copy link
Closed
Closed
tarfile.tar_filter doesn't handle symlinks with empty names#160097
Copy link
Assignees
StanFromIreland
Labels
3.11only security fixesonly security fixes3.12only security fixesonly security fixes3.13only security fixesonly security fixes3.14bugs and security fixesbugs and security fixes3.15bugs and security fixesbugs and security fixes3.16new features, bugs and security fixesnew features, bugs and security fixesstdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytype-securityA security issueA security issue

Description

@StanFromIreland
StanFromIreland
opened on Oct 21, 2026
Issue body actions

The same as #149486, but for tar.

Linked PRs

  • gh-160097: Reject links replacing the destination in tarfile.tar_filter #160098
  • [3.15] gh-160097: Reject links replacing the destination in tarfile.tar_filter (GH-160098) #160339
  • [3.14] gh-160097: Reject links replacing the destination in tarfile.tar_filter (GH-160098) #160340
  • [3.13] gh-160097: Reject links replacing the destination in tarfile.tar_filter (GH-160098) #160341
  • [3.12] gh-160097: Reject links replacing the destination in tarfile.tar_filter (GH-160098) #160342
  • [3.11] gh-160097: Reject links replacing the destination in tarfile.tar_filter (GH-160098) #160343

Activity

  1. StanFromIreland
    self-assigned this
    on Oct 21, 2026
  2. StanFromIreland
    added
    type-securityA security issueA security issue
    stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory
    3.11only security fixesonly security fixes
    3.12only security fixesonly security fixes
    3.13only security fixesonly security fixes
    3.14bugs and security fixesbugs and security fixes
    on Oct 21, 2026
  3. StanFromIreland
    added this to Tarfile issues 🗄️on Oct 21, 2026
  4. StanFromIreland
    added
    3.15bugs and security fixesbugs and security fixes
    3.16new features, bugs and security fixesnew features, bugs and security fixes
    on Oct 21, 2026
  5. StanFromIreland
    added 3 commits that reference this issue on Oct 22, 2026

    gh-160097: Reject links replacing the destination in `tarfile.tar_fil…

    e7e0b35

    [3.14] gh-160097: Reject links replacing the destination in `tarfile.…

    0901ad4

    [3.15] gh-160097: Reject links replacing the destination in `tarfile.…

    c6ada40
  6. Yhg1s
    added 2 commits that reference this issue on Oct 25, 2026

    [3.12] gh-160097: Reject links replacing the destination in `tarfile.…

    f4401da

    [3.13] gh-160097: Reject links replacing the destination in `tarfile.…

    04d8fca
  7. pablogsal
    added a commit that references this issue on Oct 25, 2026

    [3.11] gh-160097: Reject links replacing the destination in `tarfile.…

    bc93f8a
  8. StanFromIreland
    closed this as completedon Oct 25, 2026
  9. github-project-automation
    moved this to Done in Tarfile issues 🗄️on Oct 25, 2026
  10. icanhasmath
    added 2 commits that reference this issue on Oct 28, 2026

    [3.11] pythongh-160097: Reject links replacing the destination in `ta…

    81cf366

    [3.11] pythongh-160097: Reject links replacing the destination in `ta…

    99755e5
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

  • @StanFromIreland
    StanFromIreland

Labels

3.11only security fixesonly security fixes3.12only security fixesonly security fixes3.13only security fixesonly security fixes3.14bugs and security fixesbugs and security fixes3.15bugs and security fixesbugs and security fixes3.16new features, bugs and security fixesnew features, bugs and security fixesstdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytype-securityA security issueA security issue

Projects

  • Tarfile issues 🗄️
    Status
    Done
    Show more project fields

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.