[Security-sig] Re: [Security-announce][CVE-2023-6597] tempfile.TemporaryDirectory dereferences symlinks during cleanup

Hello, On Tue, 2024-03-19 at 11:10 -0400, Ee Durbin wrote:

An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior.

The fix for this seems to be present in 3.12.1 and 3.11.8: $ git describe --contains 6ceb8aeda504b079fef7a57b8d81472f15cdd9a5 v3.12.1~4 $ git describe --contains 5585334d772b253a01a6730e8202ffb1607c3d25 v3.11.8~304 -- Best regards, Michał Górny