CVE-2007-4559 patch when building on Windows#6704

Merged

radarhere merged 4 commits intopython-pillow:mainfrom nulano:cve-2007-4559

Nov 8, 2022

+11

Commits on Oct 30, 2022

Adding tarfile member sanitization to extractall()

TrellixVulnTeam
authored and
nulano
committed
simplify patch, also check zipfile
nulano
committed

Commits on Nov 3, 2022

use os.path.commonpath instead of os.path.commonprefix

nulano
and
radarhere
authored

Commits on Nov 4, 2022

simplify code

nulano
and
radarhere
authored