Insecurely generated cookies In pypy3
Description
When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | - | ||
debian 14 | 7.3.20+dfsg-2 | ||
debian 12 | - | ||
debian 13 | 3.13.4-1 | ||
debian 14 | 3.13.4-1 | ||
 rpm rhel8.6 | 0:3.6.8-47.el8_6.8 | ||
rpm rhel8 | 0:3.6.8-70.el8_10 | ||
rpm rhel8 | 0:3.11.13-1.el8_10 | ||
rpm rhel9 | 0:3.9.21-2.el9_6.1 | ||
rpm rhel9 | 0:3.12.9-1.el9_6.1 |
1-10 of 19
10
Aliases
1. 2. 3. 4. 5.