This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author gc2
Recipients Joel Croteau, Julian, christian.heimes, docs@python, eric.smith, gc2, lukasz.langa, mgorny, miss-islington, ncoghlan, ned.deily, pablogsal, pmoody, serhiy.storchaka, steve.dower, vstinner
Date 2021-05-25.11:20:51
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1621941651.6.0.194845884194.issue36384@roundup.psfhosted.org>
In-reply-to
Content
The timeline there is wrong. This issue's creation time isn't the disclosure time, it's when the bug was introduced. The disclosure was on 30th of May, when I emailed security@python.org and Christian Heimes commented here and made https://github.com/python/cpython/pull/25099. Even though Serhiy Storchaka commented that this could be a security issue back when the issue was new, the date would be 30th of March 2019, not 20th.
History
Date User Action Args
2021-05-25 11:20:51gc2setrecipients: + gc2, ncoghlan, vstinner, eric.smith, christian.heimes, ned.deily, pmoody, docs@python, lukasz.langa, mgorny, Julian, serhiy.storchaka, steve.dower, pablogsal, miss-islington, Joel Croteau
2021-05-25 11:20:51gc2setmessageid: <1621941651.6.0.194845884194.issue36384@roundup.psfhosted.org>
2021-05-25 11:20:51gc2linkissue36384 messages
2021-05-25 11:20:51gc2create