On Thu, 31 Jul 2008, Sebastian Rother wrote: > I wont piss off anybody, it will be a gigantic task and I can imagine it > (hopefully) because of some projects as well but except to tell anybody > "you can't have both" a "we do not have the manpower to do this" would be > more truthly? It's no shame to admit there not enough res. available to do > things.
Want to help? Then you can cherrypick the patches from the python 2.5 branch that close the vulnerabilities and post them to the list (as links to the svn changesets in the python webcvs/viewvc) matched against CVE numbers. As has been said countless times before, chatter on mailing lists will not yield progress; someone has to actually do the work. -d