| Package | Affected versions | Patched versions |
|---|---|---|
| python | = 3.15.0≥ 3.14.0, < 3.14.4< 3.13.13 | 3.14.43.13.13 |
The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free