#tarfile — Public Fediverse posts

Another fresh #Python #tarfile #vulnerability

Python TarFile.extractall(..., filter='tar') arbitrary file chmod

https://github.com/python/cpython/issues/127987

A couple other fun bugs 🐛

#Python - #Tarfile Realpath Overflow #Vulnerability
https://github.com/google/security-research/security/advisories/GHSA-hgqp-3mmf-7h8f

#Python #Tar Filter Bypass #Vulnerability
https://github.com/google/security-research/security/advisories/GHSA-7fj8-pjw2-r9vh

#Python - #Tarfile Realpath Overflow #Vulnerability

https://github.com/google/security-research/security/advisories/GHSA-hgqp-3mmf-7h8f

« #Tarfile : Exploiting the World With a 15-Year-Old #Vulnerability » 🐍
› https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/tarfile-exploiting-the-world.html
#Python #Security #Flaw

📬 Python Sicherheitslücke betrifft mehr als 350.000 offene Projekte
#Hacking #Softwareentwicklung #github #KasimirSchulz #MachineLearning #OpenSourceProjekte #Python #tarfile #Trellix https://tarnkappe.info/softwareentwicklung/python-sicherheitsluecke-betrifft-mehr-als-350-000-offene-projekte-256203.html

@obsolete29
Then there are #tarfile versions of some #softwares, which *can* be updated in-software, it depends on individual developers.

Unless folks check #PGPSignatures of #software that they get online though, we don't recommend #downloading software manually.

Hashtags for future searchers: #appImages #appImage #legit #legitSoftware #appUpdates #softwareUpdate #packageManager #updates #aptGet #flatPaks #PPA #PPAs #authenticity
@realsimon