[3.9] gh-139700: Check consistency of the zip64 end of central directory record ...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Tue, 7 Oct 2025 19:16:10 +0000 (21:16 +0200)
committerArnaud Rebillout <arnaudr@debian.org>
Tue, 14 Apr 2026 04:38:32 +0000 (11:38 +0700)
commit854ea0a8cb29dade9994c76d7a73ebd3dd262d97
tree9d04e611aedfe4c68159073adad60d66e4932fa3
parent47762803374547e153f135cdff861c126a126367
[3.9] gh-139700: Check consistency of the zip64 end of central directory record (GH-139702) (GH-139708) (#139715)

Support records with "zip64 extensible data" if there are no bytes
prepended to the ZIP file.

(cherry picked from commit 333d4a6f4967d3ace91492a39ededbcf3faa76a6)
(cherry picked from commit 162997bb70e067668c039700141770687bc8f267)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Origin: upstream, https://github.com/python/cpython/commit/76437ac248ad8ca44e9bf697b02b1e2241df2196

Gbp-Pq: Name CVE-2025-8291.patch
Lib/test/test_zipfile.py
Lib/zipfile.py
Misc/NEWS.d/next/Security/2025-10-07-19-31-34.gh-issue-139700.vNHU1O.rst [new file with mode: 0644]