Skip to content
This repository was archived by the owner on Jan 7, 2026. It is now read-only.

Fix tar extraction weakness which failed to resolve path traversal is…#716

Merged
nmgaston merged 2 commits intodevelopfrom
FixSafeExtractVulnerability
Aug 19, 2025
Merged

Fix tar extraction weakness which failed to resolve path traversal is…#716
nmgaston merged 2 commits intodevelopfrom
FixSafeExtractVulnerability

Conversation

@nmgaston
Copy link
Copy Markdown
Contributor

@nmgaston nmgaston commented Aug 18, 2025

…sues caused by symbolic and hard links

PULL DESCRIPTION

Fixes a tar traversal issue during the safe extract of a tar file which didn't take into account symbolic and hard links.

Impact Analysis

Info Please fill out this column
Root Cause Specifically for bugs, empty in case of no variants
Jira ticket Add the name to the Jira ticket eg: "NEXMANAGE-622". Automation will do the linking to Jira

CODE MAINTAINABILITY

  • Added required new tests relevant to the changes
  • Updated Documentation as relevant to the changes
  • PR change contains code related to security
  • PR introduces changes that break compatibility with other modules/services (If YES, please provide description)
  • Run go fmt or format-python.sh as applicable
  • Update Changelog
  • Integration tests are passing
  • If Cloudadapter changes, check Azure connectivity manually

Code must act as a teacher for future developers

@nmgaston nmgaston requested a review from sinchubhat as a code owner August 18, 2025 18:54
@nmgaston nmgaston force-pushed the FixSafeExtractVulnerability branch from 8eee259 to 1519144 Compare August 18, 2025 18:58
@nmgaston nmgaston merged commit 59b2491 into develop Aug 19, 2025
15 checks passed
@nmgaston nmgaston deleted the FixSafeExtractVulnerability branch August 19, 2025 16:32
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants