"Slippery Zips and Sticky Tar-Pits" from Python's Security Dev Seth Larson [pdf]
1–2 of 2 posts
Re: "Slippery Zips and Sticky Tar-Pits" from Python's Security Dev Seth Larson [pdf]
#2The Python Software Foundation Security Developer-in-Residence, Seth Larson, published a new white paper with Alpha-Omega titled "Slippery ZIPs and Sticky tar-pits: Security & Archives" about work to remediate 10 vulnerabilities affecting common archive format implementations such as ZIP and tar for critical Python projects.
PDF link: https://alpha-omega.dev/wp-content/uploads/sites/22/2025/10/...
PSF Blog: https://pyfound.blogspot.com/2025/10/slippery-zips-and-stick...
Alpha-Omega.dev: https://alpha-omega.dev/blog/slippery-zips-and-sticky-tar-pi...