tmpdir: prevent symlink attacks and TOCTOU races (CVE-2025-71176)#14279

Open

laurac8r wants to merge 44 commits intopytest-dev:mainfrom

laurac8r:hotfix/cve

Commits on Mar 9, 2026

Commits on Mar 11, 2026

Merge branch 'pytest-dev:main' into hotfix/cve
laurac8r
authored

Commits on Mar 13, 2026

Commits on Mar 15, 2026

Merge branch 'pytest-dev:main' into hotfix/cve
laurac8r
authored
docs: enhance CVE-2025-71176 changelog entry with hyperlinks
laura
committed
Merge remote-tracking branch 'origin/hotfix/cve' into hotfix/cve
laura
committed
refactor(tmpdir): extract _safe_open_dir into a reusable context manager
laura
committed
[pre-commit.ci] auto fixes from pre-commit.com hooks
pre-commit-ci[bot]
committed
docs: update docstring
laura
committed
Merge remote-tracking branch 'origin/hotfix/cve' into hotfix/cve
laura
committed
refactor(testing): consolidate imports in test_tmpdir.py
laura
committed
[pre-commit.ci] auto fixes from pre-commit.com hooks
pre-commit-ci[bot]
committed
refactor: consolidate imports and hoist getpass to module level
laura
committed
Merge remote-tracking branch 'origin/hotfix/cve' into hotfix/cve
laura
committed
[pre-commit.ci] auto fixes from pre-commit.com hooks
pre-commit-ci[bot]
committed
test(tmpdir): make test_pytest_sessionfinish_handles_missing_basetemp_dir isolated
laura
committed
Merge remote-tracking branch 'origin/hotfix/cve' into hotfix/cve
laura
committed
hotfix: mitigate DoS when a non-directory file blocks pytest-of-<user>
laura
committed
[pre-commit.ci] auto fixes from pre-commit.com hooks
pre-commit-ci[bot]
committed
test(tmpdir): add regression test for mkdir failure after unlink in _try_ensure_directory
laura
committed
Merge remote-tracking branch 'origin/hotfix/cve' into hotfix/cve
laura
committed
[pre-commit.ci] auto fixes from pre-commit.com hooks
pre-commit-ci[bot]
committed
Merge branch 'main' into hotfix/cve
laura
committed
tmpdir: replace predictable rootdir with mkdtemp-based random suffix (#13669)
laura
committed
[pre-commit.ci] auto fixes from pre-commit.com hooks
pre-commit-ci[bot]
committed
refactor: style: minor code formatting cleanup in tmpdir and test_tmpdir
laura
committed
Merge remote-tracking branch 'origin/hotfix/cve' into hotfix/cve
laura
committed
[pre-commit.ci] auto fixes from pre-commit.com hooks
pre-commit-ci[bot]
committed
test(tmpdir): strengthen fchmod defense-in-depth test by widening permissions instead of no-op
laura
committed

Commits on Mar 16, 2026

Merge branch 'main' into hotfix/cve
laurac8r
authored

Commits on Mar 17, 2026

Merge branch 'main' into hotfix/cve
laurac8r
authored

Commits on Mar 18, 2026

Merge branch 'main' into hotfix/cve
laurac8r
authored