This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author ned.deily
Recipients Amir, Beuc, corona10, eric.smith, miss-islington, ned.deily, nnewram, rvteja92, svaddi, tapakund
Date 2020-06-30.14:41:52
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1593528112.66.0.411423772296.issue41004@roundup.psfhosted.org>
In-reply-to
Content
A legitimate CVE should certainly be backported to all applicable releases, so, yes.  However, I think that it is important for the CVE to be mentioned in the NEWS blurbs for each commit.  So please update the NEWS items in each open PR to include the CVE. For master and 3.9 (if you hurry), you can update the original blurb file.  For 3.8, the blurb file is in the process of being merged into the blurb for the release; for it, wait until the v3.8.4rc1 has been merged back into the main cpython repo and then update the merged the blob, please.  Thanks!
History
Date User Action Args
2020-06-30 14:41:52ned.deilysetrecipients: + ned.deily, eric.smith, corona10, miss-islington, tapakund, Amir, Beuc, nnewram, svaddi, rvteja92
2020-06-30 14:41:52ned.deilysetmessageid: <1593528112.66.0.411423772296.issue41004@roundup.psfhosted.org>
2020-06-30 14:41:52ned.deilylinkissue41004 messages
2020-06-30 14:41:52ned.deilycreate