This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author vstinner
Recipients alexandre.vassalotti, benjamin.peterson, hroncok, mcepl, miss-islington, serhiy.storchaka, shuoz, vstinner, xtreak
Date 2019-01-21.20:58:29
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1548104309.73.0.553089173622.issue34656@roundup.psfhosted.org>
In-reply-to
Content
Python 2.7 is not affected:

* Python 2.7 has no C accelerator _pickle (Modules/_pickle.c)
* Python 2.7 doesn't support protocol 4 (attached proof of concept)

I reopen the issue because the issue should be fixed in 3.4 and 3.5 as well, since it has been marked as a vulnerability (it got a CVE number).
History
Date User Action Args
2019-01-21 20:58:31vstinnersetrecipients: + vstinner, alexandre.vassalotti, benjamin.peterson, mcepl, serhiy.storchaka, hroncok, miss-islington, xtreak, shuoz
2019-01-21 20:58:29vstinnersetmessageid: <1548104309.73.0.553089173622.issue34656@roundup.psfhosted.org>
2019-01-21 20:58:29vstinnerlinkissue34656 messages
2019-01-21 20:58:29vstinnercreate