[3.9] gh-136065: Fix quadratic complexity in os.path.expandvars() (GH-134952) (GH...
authorŁukasz Langa <lukasz@langa.pl>
Fri, 31 Oct 2025 16:05:53 +0000 (17:05 +0100)
committerArnaud Rebillout <arnaudr@debian.org>
Thu, 14 May 2026 03:00:00 +0000 (10:00 +0700)
commitb51110531a726cebf7e262947034ccfaa6521941
tree0024e3feab20b15ed196ee55946a6bb0dba4761c
parentb07e6410254d7dee669e9972b858e074c030cbf3
[3.9] gh-136065: Fix quadratic complexity in os.path.expandvars() (GH-134952) (GH-140839)

(cherry picked from commit f029e8db626ddc6e3a3beea4eff511a71aaceb5c)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Co-authored-by: Łukasz Langa <lukasz@langa.pl>
Origin: backport, https://github.com/python/cpython/commit/2e6150adccaaf5bd95d4c19dfd04a36e0b325d8c

Gbp-Pq: Name CVE-2025-6075.patch
Lib/ntpath.py
Lib/posixpath.py
Lib/test/test_genericpath.py
Lib/test/test_ntpath.py
Misc/NEWS.d/next/Security/2025-05-30-22-33-27.gh-issue-136065.bu337o.rst [new file with mode: 0644]