Thread: [Announce] CSSU devel, it may eat your brain
View Single Post
misiak is offline misiak
2014-06-27 , 21:11
Posts: 805 | Thanked: 1,605 times | Joined on Feb 2010 @ Gdynia, Poland
#410
Originally Posted by ade View Post
Just did some more digging. For python 2.5, the code is in python-simplejson (the json module for python 2.5).

And already did the fix in the code

The result now is:
Code:
Python 2.5.4 (r254:67916, May 17 2010, 21:00:32) 
[GCC 4.2.1] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> execfile("vulnerability_test.py")
Not vulnerable
If someone wants to test with the modified code, see the attachment.
Wait, so are our devices with stock python from repositories vulnerable or not? I don't get whether you are saying that the fix in code was already made or you fixed it in the build you just attached...? If the latter, it should definitely be pushed to CSSU repos I believe...