GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — [3.11] gh-160097: Reject links replacing the destination in `tarfile.tar_filter` (GH-160098) by miss-islington · Pull Request #160343 · python/cpython

Conversation

miss-islington commented Oct 22, 2026 •

edited by bedevere-app Bot

Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link

Copy Markdown

Contributor

(cherry picked from commit e7e0b35)

Co-authored-by: Stan Ulbrych [email protected]

Issue: tarfile.tar_filter doesn't handle symlinks with empty names #160097

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          pythongh-160097: Reject links replacing the destination in `tarfile.t…

78b65b9

…ar_filter` (pythonGH-160098)

(cherry picked from commit e7e0b35)

Co-authored-by: Stan Ulbrych <[email protected]>

miss-islington requested a review from ethanfurman as a code owner

October 22, 2026 20:23

bedevere-app Bot added the awaiting review label

Oct 22, 2026

This was referenced Oct 22, 2026

tarfile.tar_filter doesn't handle symlinks with empty names #160097

Closed

gh-160097: Reject links replacing the destination in tarfile.tar_filter #160098

Merged

StanFromIreland assigned pablogsal

Oct 22, 2026

StanFromIreland approved these changes

Oct 22, 2026

View reviewed changes

bedevere-app Bot added awaiting merge and removed awaiting review labels

Oct 22, 2026

read-the-docs-community Bot commented Oct 22, 2026

Copy link

Copy Markdown

Documentation build overview

📚 cpython-previews | 🛠️ Build #35336185 | 📁 Comparing 78b65b9 against main (e7e0b35)

🔍 Preview build

536 files changed · + 18 added · ± 433 modified · - 85 deleted

+ Added

± Modified

- Deleted

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

pablogsal merged commit bc93f8a into python:3.11

Oct 25, 2026

25 checks passed

Uh oh!

There was an error while loading. Please reload this page.

bedevere-app Bot removed the awaiting merge label

Oct 25, 2026

miss-islington deleted the backport-e7e0b35-3.11 branch

October 25, 2026 18:15

icanhasmath pushed a commit to ActiveState/cpython that referenced this pull request

Oct 28, 2026


          [3.11] pythongh-160097: Reject links replacing the destination in `ta…

81cf366

…rfile.tar_filter` (pythonGH-160098) (python#160343)

pythongh-160097: Reject links replacing the destination in `tarfile.tar_filter` (pythonGH-160098)
(cherry picked from commit e7e0b35)

Co-authored-by: Stan Ulbrych <[email protected]>
(cherry picked from commit bc93f8a)

icanhasmath pushed a commit to ActiveState/cpython that referenced this pull request

Oct 28, 2026


          [3.11] pythongh-160097: Reject links replacing the destination in `ta…

99755e5

…rfile.tar_filter` (pythonGH-160098) (python#160343)

pythongh-160097: Reject links replacing the destination in `tarfile.tar_filter` (pythonGH-160098)
(cherry picked from commit e7e0b35)

Co-authored-by: Stan Ulbrych <[email protected]>
(cherry picked from commit bc93f8a)
(cherry picked from commit f2435de)

juergbi mentioned this pull request

Oct 30, 2026

_tarfile.py: Apply fix from Python 3.11.18 apache/buildstream#2216

Merged

Passw pushed a commit to Passw/Build-System-apache-buildstream that referenced this pull request

Nov 1, 2026


          _tarfile.py: Apply fix from Python 3.11.18

ec680c6

Reject links replacing the destination in `tarfile.tar_filter`.

python/cpython#160343

Reviewers

StanFromIreland

StanFromIreland approved these changes

ethanfurman

Awaiting requested review from ethanfurman

ethanfurman is a code owner

Uh oh!

There was an error while loading. Please reload this page.

Assignees

pablogsal

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.

GeezerVison

Conversation

miss-islington commented Oct 22, 2026 • edited by bedevere-app Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

read-the-docs-community Bot commented Oct 22, 2026

Documentation build overview

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

miss-islington commented Oct 22, 2026 •

edited by bedevere-app Bot

Loading

Uh oh!

There was an error while loading. Please reload this page.