[3.7] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096) by miss-islington · Pull Request #104333 · python/cpython
-
-
Notifications
You must be signed in to change notification settings - Fork 34.7k
Merged
Merged
Conversation
Contributor
- Fix directory traversal security flaw in uu.decode()
- also check absolute paths and os.altsep
- Add a regression test.
(cherry picked from commit 0aeda29)
Co-authored-by: Sam Carroll 70000253+samcarroll42@users.noreply.github.com
Co-authored-by: Gregory P. Smith greg@krypto.org [Google]
…ythonGH-104096) * Fix directory traversal security flaw in uu.decode() * also check absolute paths and os.altsep * Add a regression test. --------- (cherry picked from commit 0aeda29) Co-authored-by: Sam Carroll <70000253+samcarroll42@users.noreply.github.com> Co-authored-by: Gregory P. Smith <greg@krypto.org> [Google]
bedevere-bot
mentioned this pull request
bedevere-bot
added
the
awaiting review
label
bedevere-bot
mentioned this pull request
ned-deily
self-assigned this
ned-deily
merged commit
1ce801b
into
python:3.7
bedevere-bot
removed
the
awaiting review
label
miss-islington
deleted the
backport-0aeda29-3.7
branch
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment