Sign up to save your podcasts
Or
Share Episode 344 - Python tarfile - 2022 is nothing like 2007
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Episode 344 - Python tarfile - 2022 is nothing like 2007
Josh and Kurt talk about a newly rediscovered old python vulnerability. It raises a lot of questions about what was OK in 2007 vs what's OK in 2022. The issue is very complicated and has a wild story surrounding it. There is no reason to not fix this in 2022.
Show Notes- CVE-2007-4559
- Red Hat Bug
- Register story
- Response from upstream
- Upstream patch
- ZippSlip
- Current upstream bug
- CSURF
View all episodes
By Josh Bressers
4.7
4040 ratings
Josh and Kurt talk about a newly rediscovered old python vulnerability. It raises a lot of questions about what was OK in 2007 vs what's OK in 2022. The issue is very complicated and has a wild story surrounding it. There is no reason to not fix this in 2022.
Show Notes- CVE-2007-4559
- Red Hat Bug
- Register story
- Response from upstream
- Upstream patch
- ZippSlip
- Current upstream bug
- CSURF
More shows like Open Source Security
View all
Hacked
189 Listeners
The Changelog: Software Development, Open Source
289 Listeners
Security Now (Audio)
2,005 Listeners
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
369 Listeners
LINUX Unplugged
272 Listeners
Risky Business
374 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
648 Listeners
CyberWire Daily
1,034 Listeners
Late Night Linux
168 Listeners
Smashing Security
322 Listeners
Darknet Diaries
8,111 Listeners
Hacking Humans
316 Listeners
Defense in Depth
74 Listeners
2.5 Admins
97 Listeners
Risky Bulletin
44 Listeners