[3.9] gh-139700: Check consistency of the zip64 end of central directory record ...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Tue, 7 Oct 2025 19:16:10 +0000 (21:16 +0200)
committerRaspbian forward porter <root@raspbian.org>
Sat, 24 Jan 2026 09:41:14 +0000 (09:41 +0000)
commitb1ded8c1c01099a20b940318cdec5f897a568e04
tree69b2332845d0d107ad0d950e20f3b91ab68c263c
parentc31d7f3c2680521d3f0b3ad8751b40fc6c0c4cf4
[3.9] gh-139700: Check consistency of the zip64 end of central directory record (GH-139702) (GH-139708) (#139715)

Support records with "zip64 extensible data" if there are no bytes
prepended to the ZIP file.

(cherry picked from commit 333d4a6f4967d3ace91492a39ededbcf3faa76a6)
(cherry picked from commit 162997bb70e067668c039700141770687bc8f267)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Origin: upstream, https://github.com/python/cpython/commit/76437ac248ad8ca44e9bf697b02b1e2241df2196

Gbp-Pq: Name CVE-2025-8291.patch
Lib/test/test_zipfile.py
Lib/zipfile.py
Misc/NEWS.d/next/Security/2025-10-07-19-31-34.gh-issue-139700.vNHU1O.rst [new file with mode: 0644]