Hi Piotr

> Please see https://bugzilla.redhat.com/show_bug.cgi?id=1718212
> 
> Patch is at https://gist.github.com/dhondta/f71ae7e5c4234f8edfd2f12503a5dcc7

I know you are usually pretty quick in solving serious issues.  I tried
to check the issue and think the link provided for a patch is just
pointing to a proof of concept exploit.  When reading the discussion
here

   https://github.com/davidhalter/parso/issues/75

I understand that it is not fixed but the authors do not consider the
issue serious.  Could you please give some comment from an insiders
point of view (which I'm not).  I'm just caring since several Debian
Science dependencies are about to be removed from testing due to this
bug.

Kind regards

       Andreas.

PS: Is there any reason why this package is not on Salsa and not
    team maintained?

-- 
http://fam-tille.de

Reply via email to