Episode 344 - Python tarfile - 2022 is nothing like 2007
Open Source Security Podcast - En podcast af Josh Bressers & Kurt Seifried - Mandage
Kategorier:
Josh and Kurt talk about a newly rediscovered old python vulnerability. It raises a lot of questions about what was OK in 2007 vs what's OK in 2022. The issue is very complicated and has a wild story surrounding it. There is no reason to not fix this in 2022. Show Notes CVE-2007-4559 Red Hat Bug Register story Response from upstream Upstream patch ZippSlip Current upstream bug CSURF
