-
-
Notifications
You must be signed in to change notification settings - Fork 33.2k
Closed
Labels
3.11only security fixesonly security fixes3.12only security fixesonly security fixes3.13bugs and security fixesbugs and security fixestype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error
Description
Bug report
During review of #112966 and #103263 I found inconsistency between zipfile and tarfile. When zipfile tries to extract a directory on top of an existing file, it fails. When tarfile tries to extract a directory on top of an existing file, it silently returns, keeping an existing file. This is an obvious bug in tarfile.
Both modules should be more cautious when extract on top of symlinks, but this is a different issue.
Linked PRs
- gh-114959: tarfile: do not ignore errors when extract a directory on top of a file #114960
- [3.12] gh-114959: tarfile: do not ignore errors when extract a directory on top of a file (GH-114960) #114963
- [3.11] gh-114959: tarfile: do not ignore errors when extract a directory on top of a file (GH-114960) #114964
Metadata
Metadata
Assignees
Labels
3.11only security fixesonly security fixes3.12only security fixesonly security fixes3.13bugs and security fixesbugs and security fixestype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error
Projects
Status
Done