[3.9] gh-139700: Check consistency of the zip64 end of central directory record ...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Tue, 7 Oct 2025 19:16:10 +0000 (21:16 +0200)
committerAndrej Shadura <andrewsh@debian.org>
Tue, 20 Jan 2026 10:45:10 +0000 (11:45 +0100)
commitbb3685e130f02e3fb9648c3b332a9dd971ab1617
tree501ebdcd6cd01d05a523c1f2cb0814bd7d182643
parent957d46ea9b972e0573630d4fadad17cac4eacbdb
[3.9] gh-139700: Check consistency of the zip64 end of central directory record (GH-139702) (GH-139708) (#139715)

Support records with "zip64 extensible data" if there are no bytes
prepended to the ZIP file.

(cherry picked from commit 333d4a6f4967d3ace91492a39ededbcf3faa76a6)
(cherry picked from commit 162997bb70e067668c039700141770687bc8f267)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Origin: upstream, https://github.com/python/cpython/commit/76437ac248ad8ca44e9bf697b02b1e2241df2196

Gbp-Pq: Name CVE-2025-8291.patch
Lib/test/test_zipfile.py
Lib/zipfile.py
Misc/NEWS.d/next/Security/2025-10-07-19-31-34.gh-issue-139700.vNHU1O.rst [new file with mode: 0644]