gh-156002: Bound zipfile decompression for bzip2/LZMA/Zstandard - #156003

Merged

encukou merged 8 commits into

python:mainfrom

encukou:fix-zipfile-decompress-maxlength

Aug 24, 2026

Commits on Jun 23, 2026

GHSA-p384-rgv5-vhc2: Bound zipfile decompression for bzip2/LZMA/Zstandard
tonghuaroot
committed
9097fc1

Commits on Jul 10, 2026

GHSA-p384-rgv5-vhc2: Address review: private _needs_input and reword bound comment
tonghuaroot
committed
d61a324

Commits on Jul 28, 2026

GHSA-p384-rgv5-vhc2: Rewrite the bound test to call _read1 directly
tonghuaroot
committed
660522b

Commits on Aug 11, 2026

GHSA-p384-rgv5-vhc2: Add ZIP_STORED/ZIP_DEFLATED bound tests; trim comment
tonghuaroot
committed
6135ee6

Commits on Aug 18, 2026

Merge in the main branch
encukou
committed
2335538
Add a blurb
encukou
committed
da69f5d
Use previous blurb
encukou
committed
5f474f2

Commits on Aug 20, 2026

Move blurb to Security
encukou
committed
dc8e61b