[3.9] gh-136065: Fix quadratic complexity in os.path.expandvars() (GH-134952) (GH...
authorŁukasz Langa <lukasz@langa.pl>
Fri, 31 Oct 2025 16:05:53 +0000 (17:05 +0100)
committerArnaud Rebillout <arnaudr@debian.org>
Tue, 14 Apr 2026 04:38:32 +0000 (11:38 +0700)
commite7c3161756bd10631b0d40be59ea64de0906b4e4
tree311ed4674e47191a6a8aa4bb6f12c2b7cb043f82
parent84c71fefc323acfb50bd001a55ce7ec895de4984
[3.9] gh-136065: Fix quadratic complexity in os.path.expandvars() (GH-134952) (GH-140839)

(cherry picked from commit f029e8db626ddc6e3a3beea4eff511a71aaceb5c)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Co-authored-by: Łukasz Langa <lukasz@langa.pl>
Origin: backport, https://github.com/python/cpython/commit/2e6150adccaaf5bd95d4c19dfd04a36e0b325d8c

Gbp-Pq: Name CVE-2025-6075.patch
Lib/ntpath.py
Lib/posixpath.py
Lib/test/test_genericpath.py
Lib/test/test_ntpath.py
Misc/NEWS.d/next/Security/2025-05-30-22-33-27.gh-issue-136065.bu337o.rst [new file with mode: 0644]