+- Python Forum (https://python-forum.io)
+-- Forum: General (https://python-forum.io/forum-1.html)
+--- Forum: News and Discussions (https://python-forum.io/forum-31.html)
+--- Thread: Question about security fixes (/thread-17238.html)
Question about security fixes - sharonsinger - Apr-03-2019
I am trying to find out whether fixes have been issued yet for CVE-2019-9947 and CVE-2019-9948
I can see the bugs (https://bugs.python.org/issue35906, https://bugs.python.org/issue35907) and and the pull requests linked from the bugs but I can't tell whether the code fixes have been released or not. I don't think the have but I would like to check.
Assuming the code fixes have not been released yet, how do I check when the fixes are released.
RE: Question about security fixes - j.crater - Apr-03-2019
I would like to let you know that this forum is not affiliated with Python development team/organisation, so community at python.org would probably be a better place where to ask.
That said, someone here may be able to help you - and welcome to the forums!
RE: Question about security fixes - micseydel - Apr-04-2019
Check the stage they're at https://devguide.python.org/triaging/#stage
RE: Question about security fixes - sharonsinger - Apr-09-2019
The status of the fixes have not changed since I last looked. They are in review.
Any suggestions on an appropriate community forum to post my question to? None seem appropriate so I'm trying help@python.org for starters
RE: Question about security fixes - micseydel - Apr-09-2019
I imagine help@python.org is good. The main Python folks use mailing lists (we aren't the main folks). Hopefully they're more helpful.
RE: Question about security fixes - snippsat - Apr-09-2019
(Apr-09-2019, 11:44 AM)sharonsinger Wrote: Any suggestions on an appropriate community forum to post my question to?Python-bugs-list mail
Also use Requests,i never use urllib anymore.