tarfile filter bypass: euc_kr make-up sequences let realpath() and the kernel disagree, writing files outside the destination #160717

Activity

1. StanFromIreland

   self-assigned this

   on Oct 26, 2026
2. StanFromIreland

   added

   type-securityA security issueA security issue

   extension-modulesC modules in the Modules dirC modules in the Modules dir

   3.11only security fixesonly security fixes

   3.12only security fixesonly security fixes

   3.13only security fixesonly security fixes

   3.14bugs and security fixesbugs and security fixes

   on Oct 26, 2026
3. StanFromIreland

   added this to Tarfile issues 🗄️and Codecs and encodings issueson Oct 26, 2026
4. StanFromIreland

   added

   3.15bugs and security fixesbugs and security fixes

   3.16new features, bugs and security fixesnew features, bugs and security fixes

   on Oct 26, 2026