[3.9] gh-136065: Fix quadratic complexity in os.path.expandvars() (GH-134952) (GH...
authorŁukasz Langa <lukasz@langa.pl>
Fri, 31 Oct 2025 16:05:53 +0000 (17:05 +0100)
committerRaspbian forward porter <root@raspbian.org>
Sat, 24 Jan 2026 09:41:14 +0000 (09:41 +0000)
commit1e2c69691298f1703abf44905d46557239b910ed
tree69de72c34aaae7c4547bb36ed9c045eaec538452
parente0e8ac90203e3c3790a7ddfd5257efa230d4a6f1
[3.9] gh-136065: Fix quadratic complexity in os.path.expandvars() (GH-134952) (GH-140839)

(cherry picked from commit f029e8db626ddc6e3a3beea4eff511a71aaceb5c)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Co-authored-by: Łukasz Langa <lukasz@langa.pl>
Origin: backport, https://github.com/python/cpython/commit/2e6150adccaaf5bd95d4c19dfd04a36e0b325d8c

Gbp-Pq: Name CVE-2025-6075.patch
Lib/ntpath.py
Lib/posixpath.py
Lib/test/test_genericpath.py
Lib/test/test_ntpath.py
Misc/NEWS.d/next/Security/2025-05-30-22-33-27.gh-issue-136065.bu337o.rst [new file with mode: 0644]