[Python-Dev] Security Advisory for unicode repr() bug?

[Neal Norwitz]

On 10/7/06, skip at pobox.com <skip at pobox.com> wrote:
>
>     Georg> [ Bug http://python.org/sf/1541585 ]
>
>     Georg> This seems to be handled like a security issue by linux
>     Georg> distributors, it's also a news item on security related pages.
>
>     Georg> Should a security advisory be written and official patches be
>     Georg> provided?
>
> I asked about this a few weeks ago.  I got no direct response.  Secunia sent
> mail to webmaster and the SF project admins asking about how this could be
> exploited.  (Isn't figuring that stuff out their job?)

FWIW, I responded to the original mail from Secunia with what little I
know about the problem.  Everyone on the original mail was copied.
However,  I got ~30 bounces for all the Source Forge addresses due to
some issue between SF and Google mail.

n