python/tqdm
1
0
Fork 0
Code Issues Activity

Merging upstream version 4.66.4:

Browse source 
- any optional non-boolean CLI arguments are passed through python's eval,
  allowing arbitrary code execution [CVE-2024-34062] (Closes: #1070372).

Signed-off-by: Daniel Baumann <daniel@debian.org>
This commit is contained in:
Daniel Baumann 2025-02-05 19:20:00 +01:00
parent cc4eb343db
commit 10170fb64c
Signed by: daniel
GPG key ID: FBB4F0E80A80222F
18 changed files with 64 additions and 52 deletions
Download patch file Download diff file Expand all files Collapse all files

2
DEMO.ipynb
View file

@ -413,7 +413,7 @@
" \"\"\"Provides a `total_time` format parameter\"\"\"\n",
" @property\n",
" def format_dict(self):\n",
" d = super(TqdmExtraFormat, self).format_dict\n",
" d = super().format_dict\n",
" total_time = d[\"elapsed\"] * (d[\"total\"] or 0) / max(d[\"n\"], 1)\n",
" d.update(total_time=self.format_interval(total_time) + \" in total\")\n",
" return d\n",