Episode Details

Josh and Kurt talk about a newly rediscovered old python vulnerability. It raises a lot of questions about what was OK in 2007 vs what's OK in 2022. The issue is very complicated and has a wild story surrounding it. There is no reason to not fix this in 2022.

Show Notes

• CVE-2007-4559
• Red Hat Bug
• Register story
• Response from upstream
• Upstream patch
• ZippSlip
• Current upstream bug
• CSURF