3 ms·

But Python is not GPL or similarly restrictively licensed, so RH is not obliged to publish the changed code they produce for their paying customers. Whether the

But Python is not GPL or similarly restrictively licensed, so RH is not obliged to publish the changed code they produce for their paying customers. Whether they will do e. g. via CentOS I have not investigated.

jcelerier 7y ago
to be fair, all the CVEs I see in the last few years are related to urllib (https://www.cvedetails.com/vulnerability-list/vendor_id-10210/product_id-18230/version_id-92056/year-2019/Python-Python-2.7.html https://www.cvedetails.com/vulnerability-list/vendor_id-1021...) - there are tons and tons of applications which aren't even using any kind of network communications, does it matter for them that Python gets updated ?