[Python-Dev] Released fixes for CVE-2008-2315 for Python 2.4?

[Jesse Noller]

On Nov 8, 2008, at 7:44 AM, Barry Warsaw <barry at python.org> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Nov 8, 2008, at 7:24 AM, Martin v. Löwis wrote:
>
>>> Skip Montanaro and others hackers started to port the  
>>> multiprocessing module
>>> to Python 2.4 and 2.5.
>>>  http://code.google.com/p/python-multiprocessing/
>>>
>>> Is it planned to include it in 2.4.6 and/or 2.5.3?
>>
>> Neither. For 2.4.x, we only accept security fixes; for 2.5.3, only  
>> bug
>> fixes (and after that, only security fixes). New features are  
>> rejected.
>
> I completely agree.  If only there was an independent repository of  
> add-on packages for Python available... <wink>.
>
> - -Barry
>

The backported version of MP is on pypi. Fancy that.