Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

gh-135034: Normalize link targets in tarfile, addos.path.realpath(strict='allow_missing')#135037

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
Yhg1s merged 20 commits intopython:mainfromambv:gh-135034
Jun 3, 2025

Conversation

@ambv
Copy link
Contributor

@ambvambv commentedJun 2, 2025•
edited by encukou
Loading

Addresses CVEs 2024-12718, 2025-4138, 2025-4330, and 2025-4517.

[edit@encukou]: Also addressesCVE-2025-4435. Sorry for leaving that out of the commit messages.

Co-authored-by: Petr Viktorinencukou@gmail.com
Signed-off-by: Łukasz Langalukasz@langa.pl

📚 Documentation preview 📚:https://cpython-previews--135037.org.readthedocs.build/

…path(strict='allow_missing')`Addresses CVEs 2024-12718, 2025-4138, 2025-4330, and 2025-4517.Co-authored-by: Petr Viktorin <encukou@gmail.com>Signed-off-by: Łukasz Langa <lukasz@langa.pl>
@serhiy-storchaka
Copy link
Member

See also#71189.

ambvand others added3 commitsJune 2, 2025 22:10
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
@encukou
Copy link
Member

See also#71189.

To align with this, there'd be antpath.ALLOW_MISSING singleton rather than an'allow_missing' string.
That's possible, of course. It can catch typos. But I don't think it's worth having to import an extra name.

@encukouencukou added the 🔨 test-with-buildbotsTest PR w/ buildbots; report in status section labelJun 2, 2025
@bedevere-bot
Copy link

🤖 New build scheduled with the buildbot fleet by@encukou for commit5af66c6 🤖

Results will be shown at:

https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F135037%2Fmerge

If you want to schedule another build, you need to add the🔨 test-with-buildbots label again.

@bedevere-botbedevere-bot removed the 🔨 test-with-buildbotsTest PR w/ buildbots; report in status section labelJun 2, 2025
@encukouencukou added the 🔨 test-with-buildbotsTest PR w/ buildbots; report in status section labelJun 3, 2025
This was referencedOct 27, 2025
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

@encukouencukouencukou left review comments

@AA-TurnerAA-TurnerAA-Turner left review comments

@ethanfurmanethanfurmanAwaiting requested review from ethanfurmanethanfurman is a code owner

Assignees

@Yhg1sYhg1s

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

7 participants

@ambv@serhiy-storchaka@encukou@bedevere-bot@AA-Turner@Yhg1s@sethmlarson
[8]ページ先頭
©2009-2025 Movatter.jp