Repository navigation
Commit faf91be
[CVE-2026-4360] Pass filter_function to TarFile._extract_one() during .extract()
This patch ensures TarFile.extract() properly passes the filter
parameter to _extract_one() when fallback extraction occurs for missing
hardlink targets.
Fixes: bsc#1269959 (CVE-2026-4360)
Fixes: gh#python#151987
From-PR: gh#python/cpython!151988
Patch: CVE-2026-4360-filter_function-TarFile-extractone.patch1 parent 3bb8fcf commit faf91be
1 file changed
Lines changed: 2 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2346 | 2346 | | |
2347 | 2347 | | |
2348 | 2348 | | |
2349 | | - | |
| 2349 | + | |
| 2350 | + | |
2350 | 2351 | | |
2351 | 2352 | | |
2352 | 2353 | | |
| |||
0 commit comments