Re: [BLFS Trac] #23213: mako-1.3.12 (Python module)

#23213: mako-1.3.12 (Python module)
-------------------------+-------------------------
 Reporter:  Bruce Dubbs  |       Owner:  Joe Locash
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:  fixed
 Keywords:               |
-------------------------+-------------------------
Changes (by Joe Locash):

 * resolution:   => fixed
 * status:  assigned => closed

Comment:

 {{{
 1.3.12

 Released: Tue Apr 28 2026
         Fixed issue in :class:`.TemplateLookup` where a URI with backslash
 path
         separators (e.g. ``\..\secret.txt``) could bypass the directory
 traversal
         check on Windows, allowing reads of arbitrary files outside of the
 template
         directory.  Backslash characters in URIs are now normalized to
 forward
         slashes before path resolution.
 }}}
 Fixed at e6dae9e9c9.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23213#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page