Re: [Python-Dev] Python 2.5.3: call for patches

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • =?ISO-8859-1?Q?=22Martin_v=2E_L=F6wis=22?=

    Re: [Python-Dev] Python 2.5.3: call for patches

    I would like to apply fixes for some CVE's which are addressed in 2.5 but not
    yet in 2.4. this would include
    >
    CVE-2007-4965
    CVE-2008-1679
    CVE-2008-1721
    CVE-2008-2315
    CVE-2008-3144
    CVE-2008-1887
    CVE-2008-4864
    Can you identify the revisions that would need backporting?

    I could only find (trunk revisions)
    CVE-2007-4965: r65880
    CVE-2008-1721: r62235, issue2586
    CVE-2008-3144: issue2588, issue2589, r63734, r63728.
    CVE-2008-1887: issue2587, r62261, r62271
    CVE-2008-4864: r66689

    So what about

    CVE-2008-1679: claimed to be issue1179 in the CVE, but
    that says it fixes CVE-2007-4965 only?
    CVE-2008-2315

    In principle, this is fine with me, so go ahead.

    Regards,
    Martin
Working...