awsebcli 3.27.2__tar.gz → 3.27.4__tar.gz

{awsebcli-3.27.2 → awsebcli-3.27.4}/CHANGES.rst

@@ -1,5 +1,15 @@
 Changelog
 =========
+--------------------
+3.27.4 (2026-10-13)
+--------------------
+- Sanitize path separators in CloudWatch log stream names when saving logs with ``eb logs``
+
+--------------------
+3.27.3 (2026-06-29)
+--------------------
+- Fix path traversal vulnerability in zip extraction for ``eb labs download`` and ``eb create``
+
 --------------------
 3.27.2 (2026-05-13)
 --------------------

{awsebcli-3.27.2/awsebcli.egg-info → awsebcli-3.27.4}/PKG-INFO

@@ -1,11 +1,12 @@
-Metadata-Version: 2.2
+Metadata-Version: 2.1
 Name: awsebcli
-Version: 3.27.2
+Version: 3.27.4
 Summary: Command Line Interface for AWS EB.
 Home-page: http://aws.amazon.com/elasticbeanstalk/
 Author: AWS Elastic Beanstalk
 Author-email: aws-eb-cli@amazon.com
 License: Apache License 2.0
+Platform: UNKNOWN
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: System Administrators
@@ -19,34 +20,6 @@ Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 License-File: LICENSE.txt
-Requires-Dist: botocore<2,>=1.35.0
-Requires-Dist: cement==2.10.14
-Requires-Dist: colorama<0.5,>=0.4.6
-Requires-Dist: pathspec==0.12.1
-Requires-Dist: python-dateutil<3.0.0,>=2.1
-Requires-Dist: requests<3,>=2.31
-Requires-Dist: setuptools>=20.0
-Requires-Dist: semantic_version<2.11,>=2.10.0
-Requires-Dist: termcolor<3,>=2.4.0
-Requires-Dist: wcwidth<0.3,>=0.2.13
-Requires-Dist: PyYAML<6.1,>=5.3.1
-Requires-Dist: urllib3<2,>=1.26.5; python_version < "3.10"
-Requires-Dist: urllib3<3,>=1.26.5; python_version >= "3.10"
-Requires-Dist: packaging<27.0,>=24.2
-Requires-Dist: blessed>=1.20.0
-Requires-Dist: fabric==3.2.2
-Requires-Dist: pythonnet<4,>=3.0.5; platform_system == "Windows"
-Requires-Dist: pypiwin32==219; sys_platform == "win32" and python_version < "3.6"
-Requires-Dist: pypiwin32==223; sys_platform == "win32" and python_version >= "3.6"
-Dynamic: author
-Dynamic: author-email
-Dynamic: classifier
-Dynamic: description
-Dynamic: home-page
-Dynamic: license
-Dynamic: provides-extra
-Dynamic: requires-dist
-Dynamic: summary
 
 ======
 EB CLI
@@ -126,6 +99,16 @@ in the *AWS Elastic Beanstalk Developer Guide*.
 
 Changelog
 =========
+--------------------
+3.27.4 (2026-10-13)
+--------------------
+- Sanitize path separators in CloudWatch log stream names when saving logs with ``eb logs``
+
+--------------------
+3.27.3 (2026-06-29)
+--------------------
+- Fix path traversal vulnerability in zip extraction for ``eb labs download`` and ``eb create``
+
 --------------------
 3.27.2 (2026-05-13)
 --------------------
@@ -1009,3 +992,5 @@ Changelog
 - Default database username changed from admin to ebroot
 - Trim application version description if it is too long
 - Application version no longer includes git hash
+
+

{awsebcli-3.27.2 → awsebcli-3.27.4/awsebcli.egg-info}/PKG-INFO

@@ -1,11 +1,12 @@
-Metadata-Version: 2.2
+Metadata-Version: 2.1
 Name: awsebcli
-Version: 3.27.2
+Version: 3.27.4
 Summary: Command Line Interface for AWS EB.
 Home-page: http://aws.amazon.com/elasticbeanstalk/
 Author: AWS Elastic Beanstalk
 Author-email: aws-eb-cli@amazon.com
 License: Apache License 2.0
+Platform: UNKNOWN
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: System Administrators
@@ -19,34 +20,6 @@ Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 License-File: LICENSE.txt
-Requires-Dist: botocore<2,>=1.35.0
-Requires-Dist: cement==2.10.14
-Requires-Dist: colorama<0.5,>=0.4.6
-Requires-Dist: pathspec==0.12.1
-Requires-Dist: python-dateutil<3.0.0,>=2.1
-Requires-Dist: requests<3,>=2.31
-Requires-Dist: setuptools>=20.0
-Requires-Dist: semantic_version<2.11,>=2.10.0
-Requires-Dist: termcolor<3,>=2.4.0
-Requires-Dist: wcwidth<0.3,>=0.2.13
-Requires-Dist: PyYAML<6.1,>=5.3.1
-Requires-Dist: urllib3<2,>=1.26.5; python_version < "3.10"
-Requires-Dist: urllib3<3,>=1.26.5; python_version >= "3.10"
-Requires-Dist: packaging<27.0,>=24.2
-Requires-Dist: blessed>=1.20.0
-Requires-Dist: fabric==3.2.2
-Requires-Dist: pythonnet<4,>=3.0.5; platform_system == "Windows"
-Requires-Dist: pypiwin32==219; sys_platform == "win32" and python_version < "3.6"
-Requires-Dist: pypiwin32==223; sys_platform == "win32" and python_version >= "3.6"
-Dynamic: author
-Dynamic: author-email
-Dynamic: classifier
-Dynamic: description
-Dynamic: home-page
-Dynamic: license
-Dynamic: provides-extra
-Dynamic: requires-dist
-Dynamic: summary
 
 ======
 EB CLI
@@ -126,6 +99,16 @@ in the *AWS Elastic Beanstalk Developer Guide*.
 
 Changelog
 =========
+--------------------
+3.27.4 (2026-10-13)
+--------------------
+- Sanitize path separators in CloudWatch log stream names when saving logs with ``eb logs``
+
+--------------------
+3.27.3 (2026-06-29)
+--------------------
+- Fix path traversal vulnerability in zip extraction for ``eb labs download`` and ``eb create``
+
 --------------------
 3.27.2 (2026-05-13)
 --------------------
@@ -1009,3 +992,5 @@ Changelog
 - Default database username changed from admin to ebroot
 - Trim application version description if it is too long
 - Application version no longer includes git hash
+
+

{awsebcli-3.27.2 → awsebcli-3.27.4}/awsebcli.egg-info/SOURCES.txt

@@ -203,6 +203,4 @@ ebcli/operations/tagops/tagops.py
 ebcli/resources/__init__.py
 ebcli/resources/regex.py
 ebcli/resources/statics.py
-ebcli/resources/strings.py
-tests/test_dependencies_mismatch.py
-tests/test_help_texts.py
+ebcli/resources/strings.py

{awsebcli-3.27.2 → awsebcli-3.27.4}/awsebcli.egg-info/entry_points.txt

@@ -1,3 +1,4 @@
 [console_scripts]
 eb = ebcli.core.ebcore:main
 ebp = ebcli.core.ebpcore:main
+

{awsebcli-3.27.2 → awsebcli-3.27.4}/ebcli/__init__.py

@@ -11,4 +11,4 @@
 # distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
 # ANY KIND, either express or implied. See the License for the specific
 # language governing permissions and limitations under the License.
-__version__ = '3.27.2'
+__version__ = '3.27.4'

{awsebcli-3.27.2 → awsebcli-3.27.4}/ebcli/core/fileoperations.py

@@ -40,7 +40,8 @@ from ebcli.resources.strings import prompts, strings
 from ebcli.objects.exceptions import (
     NotInitializedError,
     InvalidSyntaxError,
-    NotFoundError
+    NotFoundError,
+    ValidationError
 )
 from ebcli.core.ebglobals import Constants
 
@@ -482,14 +483,19 @@ def unzip_folder(file_location, directory):
     if not os.path.isdir(directory):
         os.makedirs(directory)
 
-    zip = zipfile.ZipFile(file_location, 'r', allowZip64=True)
-    for cur_file in zip.namelist():
-        if not cur_file.endswith('/'):
-            root, name = os.path.split(cur_file)
-            path = os.path.normpath(os.path.join(directory, root))
-            if not os.path.isdir(path):
-                os.makedirs(path)
-            open(os.path.join(path, name), 'wb').write(zip.read(cur_file))
+    real_directory = os.path.realpath(directory)
+    with zipfile.ZipFile(file_location, 'r', allowZip64=True) as zf:
+        for cur_file in zf.namelist():
+            if not cur_file.endswith('/'):
+                root, name = os.path.split(cur_file)
+                path = os.path.normpath(os.path.join(directory, root))
+                target_file = os.path.realpath(os.path.join(path, name))
+                if not target_file.startswith(real_directory + os.sep):
+                    raise ValidationError(
+                        'Zip entry "{}" would extract outside the target directory'.format(cur_file))
+                if not os.path.isdir(path):
+                    os.makedirs(path)
+                open(os.path.join(path, name), 'wb').write(zf.read(cur_file))
 
 
 def delete_app_file(app_name):

{awsebcli-3.27.2 → awsebcli-3.27.4}/ebcli/operations/createops.py

@@ -12,7 +12,6 @@
 # language governing permissions and limitations under the License.
 import os
 import re
-from zipfile import ZipFile
 
 from cement.utils.misc import minimal_logger
 
@@ -164,7 +163,7 @@ def download_and_extract_sample_app(env_name):
         zip_file_location = '.elasticbeanstalk/.sample_app_download.zip'
         io.echo('INFO: {}'.format(strings['create.downloading_sample_application']))
         download_application_version(url, zip_file_location)
-        ZipFile(zip_file_location, 'r', allowZip64=True).extractall()
+        fileoperations.unzip_folder(zip_file_location, os.getcwd())
         os.remove(zip_file_location)
         io.echo('INFO: {}'.format(strings['create.sample_application_download_complete']))
     except NotAuthorizedError as e:

{awsebcli-3.27.2 → awsebcli-3.27.4}/ebcli/operations/logsops.py

@@ -876,7 +876,8 @@ def _get_cloudwatch_messages(
 
 
 def __get_full_path_for_instance_logs(logs_location, instance_id):
-    return '{0}/{1}.log'.format(logs_location, instance_id)
+    filename = instance_id.replace('/', '_').replace('\\', '_')
+    return '{0}/{1}.log'.format(logs_location, filename)
 
 
 def _get_platform_builder_group_name(platform_name):

awsebcli-3.27.2/tests/test_dependencies_mismatch.py

@@ -1,145 +0,0 @@
-# Copyright 2018 Amazon.com, Inc. or its affiliates. All Rights Reserved.
-#
-# Licensed under the Apache License, Version 2.0 (the "License"). You
-# may not use this file except in compliance with the License. A copy of
-# the License is located at
-#
-# http://aws.amazon.com/apache2.0/
-#
-# or in the "license" file accompanying this file. This file is
-# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
-# ANY KIND, either express or implied. See the License for the specific
-# language governing permissions and limitations under the License.
-
-
-try:
-    from pip._internal.operations.check import (
-        check_package_set,
-        create_package_set_from_installed,
-    )
-except ImportError:
-    raise RuntimeError('You need pip==21.1 to check for dependency incompatibilities.')
-
-from ebcli.core import io
-
-_indent = '  '
-
-
-def color_red(message):
-    io.echo(io.bold(io.color('red', message)))
-
-
-def color_green(message):
-    io.echo(io.bold(io.color('green', message)))
-
-
-def collect_package_requirements_by_requirement_name(req_name, package_set):
-    required_by = dict()
-    for pkg_name, package in package_set.items():
-        for req in package.dependencies:
-            if req.name.lower() == req_name.lower():
-                required_by[pkg_name] = req.specifier
-
-    return required_by
-
-
-def collect_package_set():
-    package_set = create_package_set_from_installed()[0]
-
-    return package_set
-
-
-def check_for_missing_requirements_and_dependency_incompatibilities():
-    try:
-        package_set = collect_package_set()
-        missing, conflicting = check_package_set(package_set)
-
-        io.echo('- Checking for missing requirements ... ')
-        if missing:
-            color_red('{}Found unmet dependencies'.format(_indent * 1))
-            missing_description = describe_missing_results(missing, package_set)
-            color_red(missing_description)
-        else:
-            color_green('{}OK!'.format(_indent * 2))
-
-        io.echo('- Checking for dependency incompatibilities ... ')
-        if conflicting:
-            color_red('{}Found dependency incompatibilities'.format(_indent * 1))
-            conflicting_description = describe_conflicting_results(conflicting, package_set)
-            color_red(conflicting_description)
-        else:
-            color_green('{}OK!'.format(_indent * 1))
-
-        if missing or conflicting:
-            exit(1)
-    except Exception as e:
-        raise RuntimeError(
-            '    Something went wrong while attempting to find missing and/or incompatible dependencies. '
-            'The following exception was raised: \n    {}'.format(str(e))
-        )
-
-
-def describe_conflicting_results(conflicting, package_set):
-    conflicting_reqs = dict()
-    description = '{}Confliciting dependencies:\n'.format(_indent * 2)
-
-    for pkg_name in conflicting:
-        for result in conflicting[pkg_name]:
-
-            req_name = result[0]
-            req_version = result[1]
-            req = result[2]
-
-            if not req_name in conflicting_reqs:
-                conflicting_reqs[req_name] = {
-                    'required_by': collect_package_requirements_by_requirement_name(req_name, package_set),
-                    'package_details': package_set[req_name]
-                }
-
-    for req_name, req in conflicting_reqs.items():
-        req_version = req['package_details'].version
-        description += '{}{}:\n'.format(_indent * 3, req_name)
-        description += '{}Installed version: {}\n'.format(_indent * 4, req_version)
-        description += '{}Required by:\n'.format(_indent * 4)
-        for pkg_name, specifier in req['required_by'].items():
-            is_conflict = not specifier.contains(req_version, prereleases=True)
-            description += '{}{} {} ({}: {}) {}\n'.format(
-                _indent * 5,
-                pkg_name,
-                package_set[pkg_name].version,
-                req_name,
-                specifier,
-                '[CONFLICT]' if is_conflict else ''
-            )
-
-    return description
-
-
-def describe_missing_results(missing, package_set):
-    missing_reqs = dict()
-    description = '{}Missing dependencies:\n'.format(_indent * 2)
-
-    for pkg_name in missing:
-        for result in missing[pkg_name]:
-
-            req_name = result[0]
-
-            if not req_name in missing_reqs:
-                missing_reqs[req_name] = collect_package_requirements_by_requirement_name(req_name, package_set)
-
-    for req_name, required_by in missing_reqs.items():
-        description += '{}{}:\n'.format(_indent * 3, req_name)
-        description += '{}Required by:\n'.format(_indent * 4)
-        for pkg_name, specifier in required_by.items():
-            description += '{}{} {} ({}: {})\n'.format(
-                _indent * 5,
-                pkg_name,
-                package_set[pkg_name].version,
-                req_name,
-                specifier,
-            )
-
-    return description
-
-io.echo('Checking for dependency mismatches ...')
-check_for_missing_requirements_and_dependency_incompatibilities()