Canonical list of Python security vulnerabilities

2023-07-14 Thread Bob Kline via Python-list
Can someone point me to the official catalog of security vulnerabilities in
Python (by which I mean cpython and the standard libraries)? I found
https://www.cvedetails.com/vulnerability-list/vendor_id-10210/product_id-18230/Python-Python.html
but that isn't maintained by python.org. I also found
security-annou...@python.org, but there hasn't been anything posted there
in over a year as far as I can tell, and even before that it's pretty thin.

If there's a better place to ask, please advise.

Thanks.

-- 
Bob Kline
https://www.rksystems.com
mailto:bkl...@rksystems.com
-- 
https://mail.python.org/mailman/listinfo/python-list


Re: Canonical list of Python security vulnerabilities

2023-07-14 Thread Bob Kline via Python-list
On Fri, Jul 14, 2023 at 1:35 PM Bob Kline  wrote:

> Can someone point me to the official catalog of security vulnerabilities
> in Python 

I did try entering "python security vulnerabilities" in the search box
of the python.org web site, but what I got back was "No results
found."
-- 
https://mail.python.org/mailman/listinfo/python-list


Re: Canonical list of Python security vulnerabilities

2023-07-14 Thread Barry via Python-list


> On 14 Jul 2023, at 19:14, Bob Kline via Python-list  
> wrote:
> 
> Can someone point me to the official catalog of security vulnerabilities in
> Python (by which I mean cpython and the standard libraries)? I found
> https://www.cvedetails.com/vulnerability-list/vendor_id-10210/product_id-18230/Python-Python.html
> but that isn't maintained by python.org. I also found
> security-annou...@python.org, but there hasn't been anything posted there
> in over a year as far as I can tell, and even before that it's pretty thin.
> 
> If there's a better place to ask, please advise.

Where do you get your python from?

You may find that the organisation that packages python that you use has such a 
list.

Barry
> 
> Thanks.
> 
> -- 
> Bob Kline
> https://www.rksystems.com
> mailto:bkl...@rksystems.com
> -- 
> https://mail.python.org/mailman/listinfo/python-list
> 

-- 
https://mail.python.org/mailman/listinfo/python-list


Re: Canonical list of Python security vulnerabilities

2023-07-14 Thread Bob Kline via Python-list
On Fri, Jul 14, 2023 at 3:02 PM Barry  wrote:

> Where do you get your python from?

Directly from python.org.

> You may find that the organisation that packages python that you use has such 
> a list.

That's my hope. Just haven't found it yet. :-}
-- 
https://mail.python.org/mailman/listinfo/python-list