[galaxyproject/galaxy] 4a345b: Fix security problems when extracting untrusted ta...
Branch: refs/heads/release_18.05 Home: https://github.com/galaxyproject/galaxy Commit: 4a345b99c3cc1ee21b648386dafb4c15edcbb856 https://github.com/galaxyproject/galaxy/commit/4a345b99c3cc1ee21b648386dafb4... Author: John Chilton <jmchilton@gmail.com> Date: 2018-10-04 (Thu, 04 Oct 2018) Changed paths: M lib/galaxy/util/compression_utils.py A test-data/safetar_with_symlink.tar A test-data/testdir.tar A test-data/unsafe.tar A test-data/unsafe.zip A test-data/unsafe_relative_symlink.tar A test/unit/test_compression_util.py Log Message: ----------- Fix security problems when extracting untrusted tar files. Fixes GX-2018-0006. **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/ Functionality will be removed from GitHub.com on January 31st, 2019.
participants (1)
-
GitHub