django.git/django/utils/archive.py, branch stable/6.0.x django http://cgit.adnoto.dev/django.git/atom?h=stable%2F6.0.x 2025-10-01T12:17:44Z [6.0.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via archive.extract(). 2025-10-01T12:17:44Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2025-09-16T15:13:36Z urn:sha1:af067f56c1dd467df4abd0ddd409a700da1f03ba Thanks stackered for the report. Follow up to 05413afa8c18cdb978fcdf470e09f7a12b234a23. Backport of 924a0c092e65fa2d0953fd1855d2dc8786d94de2 from main. Removed double spaces after periods and within phrases. 2025-07-23T13:09:43Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2025-07-18T13:37:14Z urn:sha1:1ecf6889cabc9f3f60d3fdd651468cddd8f4da6e Applied Black's 2024 stable style. 2024-01-26T11:45:07Z Mariusz Felisiak felisiak.mariusz@gmail.com 2024-01-26T11:45:07Z urn:sha1:305757aec19c9d5111e4d76095ae0acd66163e4b https://github.com/psf/black/releases/tag/24.1.0 Refs #33476 -- Reformatted code with Black. 2022-02-07T19:37:05Z django-bot ops@djangoproject.com 2022-02-03T19:24:19Z urn:sha1:9c19aff7c7561e3a82978a272ecdaad40dda5c00 Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract(). 2021-02-01T08:07:36Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-01-22T11:23:18Z urn:sha1:05413afa8c18cdb978fcdf470e09f7a12b234a23 Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews. Thanks Wang Baohua for the report. Fixed #30160 -- Added support for LZMA and XZ templates to startapp/startproject management commands. 2019-07-31T08:02:13Z Nick Pope nick.pope@flightdataservices.com 2019-02-05T22:00:56Z urn:sha1:f618e033acd37d59b536d6e6126e6c5be18037f6 Refs #30160 -- Simplified archive extension map and added other aliases. 2019-07-31T07:46:17Z Nick Pope nick.pope@flightdataservices.com 2019-02-06T21:37:25Z urn:sha1:69a30f620eb46246c0b39cd40a0f7df57f2af8d0 Refs #30160 -- Made destination path a required argument of extract(). 2019-07-30T09:27:56Z Nick Pope nick.pope@flightdataservices.com 2019-02-15T23:33:21Z urn:sha1:0509148c2458a990cd0a7fd2d7cfbd45eb43e000 Fixed #30147 -- Simplified directory creation with os.makedirs(..., exist_ok=True). 2019-01-31T17:53:36Z Jon Dufresne jon.dufresne@gmail.com 2019-01-31T15:12:55Z urn:sha1:290d8471bba35980f3e228f9c171afc40f2550fa Fixed #29334 -- Updated pypi.python.org URLs to pypi.org. 2018-04-18T00:24:27Z Brett Cannon brett@python.org 2018-04-17T22:19:29Z urn:sha1:64b74804c537b12d4cca64f7cb529c0478b4c4d9