← 返回首页
[3.9] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096) by miss-islington · Pull Request #104331 · python/cpython · GitHub
Skip to content

Navigation Menu

Toggle navigation
Sign in
Appearance settings
Search or jump to...

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted
Cancel Submit feedback

Saved searches

Use saved searches to filter your results more quickly

Cancel Create saved search
Appearance settings
Resetting focus

[3.9] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096)#104331

Merged
ambv merged 1 commit into
python:3.9from
miss-islington:backport-0aeda29-3.9
May 22, 2023
Merged

[3.9] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096)#104331
ambv merged 1 commit into
python:3.9from
miss-islington:backport-0aeda29-3.9

Conversation

Copy link
Copy Markdown
Contributor

miss-islington commented May 9, 2023 •
edited by bedevere-bot
Loading

  • Fix directory traversal security flaw in uu.decode()
  • also check absolute paths and os.altsep
  • Add a regression test.

(cherry picked from commit 0aeda29)

Co-authored-by: Sam Carroll 70000253+samcarroll42@users.noreply.github.com
Co-authored-by: Gregory P. Smith greg@krypto.org [Google]

pythongh-99889: Fix directory traversal security flaw in uu.decode() (p… …
f0b29a6
…ythonGH-104096) * Fix directory traversal security flaw in uu.decode() * also check absolute paths and os.altsep * Add a regression test. --------- (cherry picked from commit 0aeda29) Co-authored-by: Sam Carroll <70000253+samcarroll42@users.noreply.github.com> Co-authored-by: Gregory P. Smith <greg@krypto.org> [Google]
bedevere-bot mentioned this pull request May 9, 2023
Closed
bedevere-bot mentioned this pull request May 9, 2023
Merged
bedevere-bot added the type-security A security issue label May 9, 2023
ambv merged commit 3d5dd1e into python:3.9 May 22, 2023
miss-islington deleted the backport-0aeda29-3.9 branch May 22, 2023 10:41
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

ambv

Labels

type-security A security issue

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

Footer

© 2026 GitHub, Inc.